# applications:
#   users:
#   - technical_user
# readers:
#   users:
#   - reader
# writers:
#   users:
#   - writer
## specify explicit permission codenames or codename filter functions and filters to match on
#   permissions:
#   - delete_device
#   - delete_virtualmachine
#   - codename__startswith:
#     - add_
#     - change_
# vm_managers:
#   - codename__endswith:
#     - _virtualmachine
# device_managers:
#   - codename__contains:
#     - device
# creators:
#   - codename__startswith:
#     - add_