Adds and/or removes which cost centers a role can access. Send only the change, not the resulting set: cost centers named in itemsToAdd become accessible, those in itemsToRemove stop being accessible, and everything else is left as it was.