apitoken.aclpolicy.yaml

---

description: API Application level access control
context:
  application: 'rundeck'
for:
  resource:
    - equals:
        kind: system
      allow: [read] # allow read of system info
    - equals:
        kind: job
      allow: [admin] # allow cluster schedule takeover
  project:
    - match:
        name: '.*'
      allow: [read] # allow view of all projects
by:
  group: api_token_group