[Write restricted dashboards] Allow write restricted upserts

[SiddharthMantri]

Context: #224411 (comment)

Upserting access control supporting objects should create them in "default/legacy" mode depending on if there's a valid active user profile.

[elasticmachine]

Pinging @elastic/kibana-security (Team:Security)