keystone/api-ref/source/v3/samples/admin/policy-create-request.json

{
    "policy": {
        "blob": "{'foobar_user': 'role:compute-user'}",
        "type": "application/json"
    }
}