Add branch level restriction with optional exemptions for users and groups. Restriction defaults to read-only. Restriction applies to branches matching by branch name, pattern, or model. Default is matching on branch name. User exceptions can be specified by the userId parameter as a common separated list of user ids. Group exceptions can be specified by the group parameter as a common separated list of group names.