curl --request POST \
  --url https://api.example.com/v1/onboarding/grant

{
  "user_id": "<string>",
  "allowed_actions": [
    "<string>"
  ],
  "withdraw_allowlist": [
    "<string>"
  ],
  "revoked": true
}