SCIM users (with scrambleProfileId and devices, standing in for scrambleUserProfile and its firebase tokens) and groups. Saving replaces the tenant's data. An fcmToken starting with fail always fails delivery.