The list of allowable actions that the role can carry out on the given resource.
OptionalconditionA condition that must be met for the actions to be allowed.
OptionalnameA descriptive name for the rule.
OptionaloutputUser-defined output to be produced when evaluating the rule.
The resource kind to which the rule applies.
A rule for actions that can be performed on a resource by a role.