Whether the current human principal satisfies the organisation usage-privacy restriction; mutation permissions are checked separately
endpoint added