so you'll need a `staff_access_grant` on every rep...