grant
    execute on function medreport.can_action_account_member (uuid, uuid) to authenticated,
    service_role;