Example of grouping variables in a Conjur policy

variable_group_example_policy.rb

# List of created variables
dev_variables = [...] 

# Creating a role of type 'variable_group' with name 'dev-variables'
dev_variables_group = role 'variable_group', 'dev-variables' 

# Allow that role to execute the variables
dev_variables.each do |v|
    v.permit 'execute', dev_variables_group
end

# dev group and layer
dev_group = group 'dev-users'
dev_layer = layer 'dev-bots'

# Grant the 'dev_variables_group' role to the group and layer, so they assume its permissions
dev_variables_group.grant_to dev_group
dev_variables_group.grant_to dev_layer