AddAdmin adds an explicit CAN_MANAGE permission for the 'admins' group if explicitAdminPermissionCheck returns true for the provided object ID.

Whether the object requires explicit manage permissions for the calling user if not set.

If applies ths customizer if the condition is true.

ObjectIdMatches returns a condition that checks if the object ID matches the expected value.

Context that is available to aclUpdateCustomizer implementations.

ACLCustomizer is a function that modifies the access control list of an object before it is updated.