Partial update. Omitted fields preserve the current value. - description is a nullable string: omitting it preserves the existing description; sending an empty string clears it. - dac defaults to the existing value when omitted, preventing accidental scope escalation.