{
  "rightToRestrict": true,
  "rightToDelete": true,
  "subjectAccessRequest": true,
  "employee": {
    "id": "string",
    "name": "string",
    "metadata": {},
    "url": "string"
  }
}