keystone/api-ref/source/v3/samples/admin/policy-update-request.json

{
    "policy": {
        "blob": {
            "foobar_user": [
                "role:compute-user"
            ]
        },
        "type": "application/json"
    }
}