Adds and/or removes which payer and linked accounts a role can access. Only the change is sent -accounts named accountsToAdd become accessible; those in accountsToRemove stop being accessible, and everything else is left as it was.