Administrative API for managing filesystem access entities such as users and groups. This way, the OpenAPI contract is always the single source of truth, and the Go code is guaranteed to stay in sync.