# applications:
#   users:
#   - technical_user
# readers:
#   users:
#   - reader
# writers:
#   users:
#   - writer
## specify explicit permission codenames or include wildcard to match multiple permissions
#   permissions:
#   - delete_device
#   - delete_virtualmachine
#   - add_*
#   - change_*
# vm_managers:
#   - *_virtualmachine
# device_managers:
#   - *device*
# creators:
#   - add_*