Examples

Support Engineer

The support engineer policy grants read access to release, channels, and application data, but read-write access to customer and license details.

{
  "v1": {
    "name": "Support Engineer",
    "resources": {
      "allowed": [
        "**/read",
        "**/list",
        "platform/app/*/license/**"
      ],
      "denied": [
        "**/*"
      ]
    }
  }
}

Sales

The sales policy grants read-write access to customers and license details, and read-only access to resources necessary to manage licenses (apps, channels, and license fields), but nothing else.

{
  "v1": {
    "name": "Sales",
    "resources": {
      "allowed": [
        "platform/app/*/read",
        "platform/app/*/channel/*/read",
        "platform/app/*/licensefields/read",
        "platform/app/*/license/**"
      ],
      "denied": [
        "**/*"
      ]
    }
  }
}