template aclpolicy file

aclpolicy-template.yaml

description: Project scope for group
context:
  project: '.*'
for:
  job:
    - equals:
        group: 'example'
        name: 'Restart'
      allow: [run,read]
    - equals:
        group: 'example'
        name: 'stop'
      allow: [run,read]
    - equals:
        group: 'example'
        name: 'start'
      allow: [run,read]
  adhoc:
    - allow: [run,read]
  node:
    - contains:
        tags: 'example'
      allow: [run,read]
by:
  group: [group_name]

---

description: Limited user access for group.
context:
  application: 'rundeck'
for:
  resource:
    - equals:
        kind: system
      allow: [read] # allow read of system info
  project:
    - match:
        name: '.*'
      allow: [read] # allow view of all projects
by:
  group: [group_name]