{
    "default": "!",

    "admin": "role:admin and tenant:admin or role:admin and tenant:service",
    "admin_support": "role:admin_support and tenant:admin or role:admin_support and tenant:service",
    "admin_viewer": "role:admin_viewer and tenant:admin or role:admin_viewer and tenant:service",

    "admin_or_support": "rule:admin or rule:admin_support",
    "admin_or_support_or_viewer": "rule:admin or rule:admin_support or rule:admin_viewer",

    "lcp:get_one": "",
    "lcp:get_all": "",

    "region:get_one": "",
    "region:get_all": "",
    "region:create": "",
    "region:update": "rule:admin",
    "region:delete": "rule:admin",

    "group:get_one": "",
    "group:get_all": "",
    "group:create": "",
    "group:update": "rule:admin",
    "group:delete": "rule:admin",

    "configuration:get": "rule:admin_or_support_or_viewer",
    "log:update": "rule:admin",

    "metadata:get": "rule:admin_or_support_or_viewer",
    "metadata:create": "rule:admin_or_support",
    "metadata:update": "rule:admin",
    "metadata:delete": "rule:admin",

    "status:put": "rule:admin"
}