You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ranger.apache.org by rm...@apache.org on 2021/11/05 18:32:07 UTC

svn commit: r1894763 [14/31] - in /ranger/site/trunk: ./ apidocs/ apidocs/ui/ kms/apidocs/ kms/apidocs/ui/

Modified: ranger/site/trunk/apidocs/resource_PublicAPIsv2.html
URL: http://svn.apache.org/viewvc/ranger/site/trunk/apidocs/resource_PublicAPIsv2.html?rev=1894763&r1=1894762&r2=1894763&view=diff
==============================================================================
--- ranger/site/trunk/apidocs/resource_PublicAPIsv2.html (original)
+++ ranger/site/trunk/apidocs/resource_PublicAPIsv2.html Fri Nov  5 18:32:04 2021
@@ -71,6 +71,7 @@
           <li><a href="#resource_PublicAPIsv2_getRole_GET"><abbr title="GET /public/v2/api/roles/{id}"><span class="sideoverflow">GET /public/v2/api/roles/{id}</span></abbr></a></li>
           <li><a href="#resource_PublicAPIsv2_updateRole_PUT"><abbr title="PUT /public/v2/api/roles/{id}"><span class="sideoverflow">PUT /public/v2/api/roles/{id}</span></abbr></a></li>
           <li><a href="#resource_PublicAPIsv2_deletePolicyDeltas_DELETE"><abbr title="DELETE /public/v2/api/server/policydeltas"><span class="sideoverflow">DELETE /public/v2/api/server/policydeltas</span></abbr></a></li>
+          <li><a href="#resource_PublicAPIsv2_deleteTagDeltas_DELETE"><abbr title="DELETE /public/v2/api/server/tagdeltas"><span class="sideoverflow">DELETE /public/v2/api/server/tagdeltas</span></abbr></a></li>
           <li><a href="#resource_PublicAPIsv2_deleteService_DELETE"><abbr title="DELETE /public/v2/api/service/{id}"><span class="sideoverflow">DELETE /public/v2/api/service/{id}</span></abbr></a></li>
           <li><a href="#resource_PublicAPIsv2_getService_GET"><abbr title="GET /public/v2/api/service/{id}"><span class="sideoverflow">GET /public/v2/api/service/{id}</span></abbr></a></li>
           <li><a href="#resource_PublicAPIsv2_updateService_PUT"><abbr title="PUT /public/v2/api/service/{id}"><span class="sideoverflow">PUT /public/v2/api/service/{id}</span></abbr></a></li>
@@ -89,6 +90,7 @@
           <li><a href="#resource_PublicAPIsv2_addUsersAndGroups_PUT"><abbr title="PUT /public/v2/api/roles/{id}/addUsersAndGroups"><span class="sideoverflow">PUT /public/v2/api/roles/{id}/addUsersAndGroups</span></abbr></a></li>
           <li><a href="#resource_PublicAPIsv2_removeAdminFromUsersAndGroups_PUT"><abbr title="PUT /public/v2/api/roles/{id}/removeAdminFromUsersAndGroups"><span class="sideoverflow">PUT /public/v2/api/roles/{id}/removeAdminFromUsersAndGroups</span></abbr></a></li>
           <li><a href="#resource_PublicAPIsv2_removeUsersAndGroups_PUT"><abbr title="PUT /public/v2/api/roles/{id}/removeUsersAndGroups"><span class="sideoverflow">PUT /public/v2/api/roles/{id}/removeUsersAndGroups</span></abbr></a></li>
+          <li><a href="#resource_PublicAPIsv2_purgeEmptyPolicies_DELETE"><abbr title="DELETE /public/v2/api/server/purgepolicies/{serviceName}"><span class="sideoverflow">DELETE /public/v2/api/server/purgepolicies/{serviceName}</span></abbr></a></li>
           <li><a href="#resource_PublicAPIsv2_deleteServiceByName_DELETE"><abbr title="DELETE /public/v2/api/service/name/{name}"><span class="sideoverflow">DELETE /public/v2/api/service/name/{name}</span></abbr></a></li>
           <li><a href="#resource_PublicAPIsv2_getServiceByName_GET"><abbr title="GET /public/v2/api/service/name/{name}"><span class="sideoverflow">GET /public/v2/api/service/name/{name}</span></abbr></a></li>
           <li><a href="#resource_PublicAPIsv2_updateServiceByName_PUT"><abbr title="PUT /public/v2/api/service/name/{name}"><span class="sideoverflow">PUT /public/v2/api/service/name/{name}</span></abbr></a></li>
@@ -221,17 +223,8 @@ Content-Type: application/json
 
                 <code class="prettyprint language-js">
 [ {
-  &quot;policyItems&quot; : [ {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+  &quot;denyExceptions&quot; : [ {
     &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ],
-    &quot;delegateAdmin&quot; : true,
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -239,18 +232,18 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  }, {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     } ],
-    &quot;delegateAdmin&quot; : true,
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  }, {
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -258,19 +251,19 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  } ],
-  &quot;allowExceptions&quot; : [ {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     } ],
-    &quot;delegateAdmin&quot; : true,
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  } ],
+  &quot;allowExceptions&quot; : [ {
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -278,56 +271,18 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  }, {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ],
     &quot;delegateAdmin&quot; : true,
-    &quot;accesses&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;isAllowed&quot; : true
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;isAllowed&quot; : true
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  } ],
-  &quot;service&quot; : &quot;...&quot;,
-  &quot;conditions&quot; : [ {
-    &quot;type&quot; : &quot;...&quot;,
-    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
-    &quot;type&quot; : &quot;...&quot;,
-    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  } ],
-  &quot;resourceSignature&quot; : &quot;...&quot;,
-  &quot;policyLabels&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-  &quot;name&quot; : &quot;...&quot;,
-  &quot;options&quot; : {
-    &quot;property1&quot; : { },
-    &quot;property2&quot; : { }
-  },
-  &quot;rowFilterPolicyItems&quot; : [ {
-    &quot;rowFilterInfo&quot; : {
-      &quot;filterExpr&quot; : &quot;...&quot;
-    },
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ],
-    &quot;delegateAdmin&quot; : true,
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -335,78 +290,46 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  }, {
-    &quot;rowFilterInfo&quot; : {
-      &quot;filterExpr&quot; : &quot;...&quot;
-    },
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ],
     &quot;delegateAdmin&quot; : true,
-    &quot;accesses&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;isAllowed&quot; : true
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;isAllowed&quot; : true
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
-  &quot;resources&quot; : {
-    &quot;property1&quot; : {
-      &quot;isExcludes&quot; : true,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-      &quot;isRecursive&quot; : true
-    },
-    &quot;property2&quot; : {
-      &quot;isExcludes&quot; : true,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-      &quot;isRecursive&quot; : true
-    }
-  },
-  &quot;isDenyAllElse&quot; : true,
-  &quot;isAuditEnabled&quot; : true,
   &quot;validitySchedules&quot; : [ {
     &quot;recurrences&quot; : [ {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
+      &quot;interval&quot; : { },
+      &quot;schedule&quot; : { }
     }, {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
+      &quot;interval&quot; : { },
+      &quot;schedule&quot; : { }
     } ],
-    &quot;endTime&quot; : &quot;...&quot;,
     &quot;startTime&quot; : &quot;...&quot;,
-    &quot;timeZone&quot; : &quot;...&quot;
+    &quot;timeZone&quot; : &quot;...&quot;,
+    &quot;endTime&quot; : &quot;...&quot;
   }, {
     &quot;recurrences&quot; : [ {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
+      &quot;interval&quot; : { },
+      &quot;schedule&quot; : { }
     }, {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
+      &quot;interval&quot; : { },
+      &quot;schedule&quot; : { }
     } ],
-    &quot;endTime&quot; : &quot;...&quot;,
     &quot;startTime&quot; : &quot;...&quot;,
-    &quot;timeZone&quot; : &quot;...&quot;
+    &quot;timeZone&quot; : &quot;...&quot;,
+    &quot;endTime&quot; : &quot;...&quot;
   } ],
-  &quot;denyExceptions&quot; : [ {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+  &quot;policyPriority&quot; : 12345,
+  &quot;policyType&quot; : 12345,
+  &quot;isAuditEnabled&quot; : true,
+  &quot;zoneName&quot; : &quot;...&quot;,
+  &quot;denyPolicyItems&quot; : [ {
     &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ],
-    &quot;delegateAdmin&quot; : true,
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -414,18 +337,18 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  }, {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     } ],
-    &quot;delegateAdmin&quot; : true,
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  }, {
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -433,26 +356,37 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    }, {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
-  &quot;policyType&quot; : 12345,
-  &quot;zoneName&quot; : &quot;...&quot;,
+  &quot;service&quot; : &quot;...&quot;,
+  &quot;resources&quot; : {
+    &quot;property1&quot; : {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;isRecursive&quot; : true,
+      &quot;isExcludes&quot; : true
+    },
+    &quot;property2&quot; : {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;isRecursive&quot; : true,
+      &quot;isExcludes&quot; : true
+    }
+  },
   &quot;dataMaskPolicyItems&quot; : [ {
     &quot;dataMaskInfo&quot; : {
       &quot;dataMaskType&quot; : &quot;...&quot;,
       &quot;valueExpr&quot; : &quot;...&quot;,
       &quot;conditionExpr&quot; : &quot;...&quot;
     },
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ],
-    &quot;delegateAdmin&quot; : true,
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -460,23 +394,46 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    }, {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
     &quot;dataMaskInfo&quot; : {
       &quot;dataMaskType&quot; : &quot;...&quot;,
       &quot;valueExpr&quot; : &quot;...&quot;,
       &quot;conditionExpr&quot; : &quot;...&quot;
     },
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;conditions&quot; : [ {
+    &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;isAllowed&quot; : true
     }, {
       &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;isAllowed&quot; : true
     } ],
     &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    }, {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  } ],
+  &quot;rowFilterPolicyItems&quot; : [ {
+    &quot;rowFilterInfo&quot; : {
+      &quot;filterExpr&quot; : &quot;...&quot;
+    },
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -484,19 +441,21 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  } ],
-  &quot;denyPolicyItems&quot; : [ {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     } ],
-    &quot;delegateAdmin&quot; : true,
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  }, {
+    &quot;rowFilterInfo&quot; : {
+      &quot;filterExpr&quot; : &quot;...&quot;
+    },
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -504,18 +463,38 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  }, {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    }, {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  } ],
+  &quot;policyItems&quot; : [ {
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;isAllowed&quot; : true
     }, {
       &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;isAllowed&quot; : true
     } ],
     &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    }, {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  }, {
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -523,18 +502,41 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    }, {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
-  &quot;policyPriority&quot; : 12345,
-  &quot;description&quot; : &quot;...&quot;,
+  &quot;policyLabels&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+  &quot;resourceSignature&quot; : &quot;...&quot;,
+  &quot;isDenyAllElse&quot; : true,
+  &quot;name&quot; : &quot;...&quot;,
   &quot;serviceType&quot; : &quot;...&quot;,
+  &quot;description&quot; : &quot;...&quot;,
+  &quot;conditions&quot; : [ {
+    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;type&quot; : &quot;...&quot;
+  }, {
+    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;type&quot; : &quot;...&quot;
+  } ],
+  &quot;options&quot; : {
+    &quot;property1&quot; : { },
+    &quot;property2&quot; : { }
+  },
   &quot;createTime&quot; : 12345,
+  &quot;id&quot; : 12345,
   &quot;updatedBy&quot; : &quot;...&quot;,
   &quot;version&quot; : 12345,
-  &quot;updateTime&quot; : 12345,
-  &quot;id&quot; : 12345,
   &quot;createdBy&quot; : &quot;...&quot;,
   &quot;guid&quot; : &quot;...&quot;,
+  &quot;updateTime&quot; : 12345,
   &quot;isEnabled&quot; : true
 } ]
                 </code>
@@ -607,17 +609,8 @@ Accept: application/json
 
                 <code class="prettyprint language-js">
 {
-  &quot;policyItems&quot; : [ {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+  &quot;denyExceptions&quot; : [ {
     &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ],
-    &quot;delegateAdmin&quot; : true,
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -625,18 +618,18 @@ Accept: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  }, {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     } ],
-    &quot;delegateAdmin&quot; : true,
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  }, {
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -644,19 +637,19 @@ Accept: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  } ],
-  &quot;allowExceptions&quot; : [ {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     } ],
-    &quot;delegateAdmin&quot; : true,
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  } ],
+  &quot;allowExceptions&quot; : [ {
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -664,56 +657,18 @@ Accept: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  }, {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ],
     &quot;delegateAdmin&quot; : true,
-    &quot;accesses&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;isAllowed&quot; : true
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;isAllowed&quot; : true
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  } ],
-  &quot;service&quot; : &quot;...&quot;,
-  &quot;conditions&quot; : [ {
-    &quot;type&quot; : &quot;...&quot;,
-    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
-    &quot;type&quot; : &quot;...&quot;,
-    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  } ],
-  &quot;resourceSignature&quot; : &quot;...&quot;,
-  &quot;policyLabels&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-  &quot;name&quot; : &quot;...&quot;,
-  &quot;options&quot; : {
-    &quot;property1&quot; : { },
-    &quot;property2&quot; : { }
-  },
-  &quot;rowFilterPolicyItems&quot; : [ {
-    &quot;rowFilterInfo&quot; : {
-      &quot;filterExpr&quot; : &quot;...&quot;
-    },
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ],
-    &quot;delegateAdmin&quot; : true,
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -721,78 +676,46 @@ Accept: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  }, {
-    &quot;rowFilterInfo&quot; : {
-      &quot;filterExpr&quot; : &quot;...&quot;
-    },
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ],
     &quot;delegateAdmin&quot; : true,
-    &quot;accesses&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;isAllowed&quot; : true
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;isAllowed&quot; : true
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
-  &quot;resources&quot; : {
-    &quot;property1&quot; : {
-      &quot;isExcludes&quot; : true,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-      &quot;isRecursive&quot; : true
-    },
-    &quot;property2&quot; : {
-      &quot;isExcludes&quot; : true,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-      &quot;isRecursive&quot; : true
-    }
-  },
-  &quot;isDenyAllElse&quot; : true,
-  &quot;isAuditEnabled&quot; : true,
   &quot;validitySchedules&quot; : [ {
     &quot;recurrences&quot; : [ {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
+      &quot;interval&quot; : { },
+      &quot;schedule&quot; : { }
     }, {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
+      &quot;interval&quot; : { },
+      &quot;schedule&quot; : { }
     } ],
-    &quot;endTime&quot; : &quot;...&quot;,
     &quot;startTime&quot; : &quot;...&quot;,
-    &quot;timeZone&quot; : &quot;...&quot;
+    &quot;timeZone&quot; : &quot;...&quot;,
+    &quot;endTime&quot; : &quot;...&quot;
   }, {
     &quot;recurrences&quot; : [ {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
+      &quot;interval&quot; : { },
+      &quot;schedule&quot; : { }
     }, {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
+      &quot;interval&quot; : { },
+      &quot;schedule&quot; : { }
     } ],
-    &quot;endTime&quot; : &quot;...&quot;,
     &quot;startTime&quot; : &quot;...&quot;,
-    &quot;timeZone&quot; : &quot;...&quot;
+    &quot;timeZone&quot; : &quot;...&quot;,
+    &quot;endTime&quot; : &quot;...&quot;
   } ],
-  &quot;denyExceptions&quot; : [ {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+  &quot;policyPriority&quot; : 12345,
+  &quot;policyType&quot; : 12345,
+  &quot;isAuditEnabled&quot; : true,
+  &quot;zoneName&quot; : &quot;...&quot;,
+  &quot;denyPolicyItems&quot; : [ {
     &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ],
-    &quot;delegateAdmin&quot; : true,
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -800,18 +723,18 @@ Accept: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  }, {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     } ],
-    &quot;delegateAdmin&quot; : true,
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  }, {
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -819,26 +742,37 @@ Accept: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    }, {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
-  &quot;policyType&quot; : 12345,
-  &quot;zoneName&quot; : &quot;...&quot;,
+  &quot;service&quot; : &quot;...&quot;,
+  &quot;resources&quot; : {
+    &quot;property1&quot; : {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;isRecursive&quot; : true,
+      &quot;isExcludes&quot; : true
+    },
+    &quot;property2&quot; : {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;isRecursive&quot; : true,
+      &quot;isExcludes&quot; : true
+    }
+  },
   &quot;dataMaskPolicyItems&quot; : [ {
     &quot;dataMaskInfo&quot; : {
       &quot;dataMaskType&quot; : &quot;...&quot;,
       &quot;valueExpr&quot; : &quot;...&quot;,
       &quot;conditionExpr&quot; : &quot;...&quot;
     },
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ],
-    &quot;delegateAdmin&quot; : true,
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -846,23 +780,46 @@ Accept: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    }, {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
     &quot;dataMaskInfo&quot; : {
       &quot;dataMaskType&quot; : &quot;...&quot;,
       &quot;valueExpr&quot; : &quot;...&quot;,
       &quot;conditionExpr&quot; : &quot;...&quot;
     },
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;conditions&quot; : [ {
+    &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;isAllowed&quot; : true
     }, {
       &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;isAllowed&quot; : true
     } ],
     &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    }, {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  } ],
+  &quot;rowFilterPolicyItems&quot; : [ {
+    &quot;rowFilterInfo&quot; : {
+      &quot;filterExpr&quot; : &quot;...&quot;
+    },
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -870,19 +827,21 @@ Accept: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  } ],
-  &quot;denyPolicyItems&quot; : [ {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     } ],
-    &quot;delegateAdmin&quot; : true,
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  }, {
+    &quot;rowFilterInfo&quot; : {
+      &quot;filterExpr&quot; : &quot;...&quot;
+    },
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -890,18 +849,38 @@ Accept: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  }, {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    }, {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  } ],
+  &quot;policyItems&quot; : [ {
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;isAllowed&quot; : true
     }, {
       &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;isAllowed&quot; : true
     } ],
     &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    }, {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  }, {
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -909,18 +888,41 @@ Accept: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    }, {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
-  &quot;policyPriority&quot; : 12345,
-  &quot;description&quot; : &quot;...&quot;,
+  &quot;policyLabels&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+  &quot;resourceSignature&quot; : &quot;...&quot;,
+  &quot;isDenyAllElse&quot; : true,
+  &quot;name&quot; : &quot;...&quot;,
   &quot;serviceType&quot; : &quot;...&quot;,
+  &quot;description&quot; : &quot;...&quot;,
+  &quot;conditions&quot; : [ {
+    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;type&quot; : &quot;...&quot;
+  }, {
+    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;type&quot; : &quot;...&quot;
+  } ],
+  &quot;options&quot; : {
+    &quot;property1&quot; : { },
+    &quot;property2&quot; : { }
+  },
   &quot;createTime&quot; : 12345,
+  &quot;id&quot; : 12345,
   &quot;updatedBy&quot; : &quot;...&quot;,
   &quot;version&quot; : 12345,
-  &quot;updateTime&quot; : 12345,
-  &quot;id&quot; : 12345,
   &quot;createdBy&quot; : &quot;...&quot;,
   &quot;guid&quot; : &quot;...&quot;,
+  &quot;updateTime&quot; : 12345,
   &quot;isEnabled&quot; : true
 }
                 </code>
@@ -934,17 +936,8 @@ Content-Type: application/json
 
                 <code class="prettyprint language-js">
 {
-  &quot;policyItems&quot; : [ {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+  &quot;denyExceptions&quot; : [ {
     &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ],
-    &quot;delegateAdmin&quot; : true,
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -952,18 +945,18 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  }, {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     } ],
-    &quot;delegateAdmin&quot; : true,
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  }, {
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -971,19 +964,19 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  } ],
-  &quot;allowExceptions&quot; : [ {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     } ],
-    &quot;delegateAdmin&quot; : true,
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  } ],
+  &quot;allowExceptions&quot; : [ {
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -991,56 +984,18 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  }, {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ],
     &quot;delegateAdmin&quot; : true,
-    &quot;accesses&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;isAllowed&quot; : true
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;isAllowed&quot; : true
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  } ],
-  &quot;service&quot; : &quot;...&quot;,
-  &quot;conditions&quot; : [ {
-    &quot;type&quot; : &quot;...&quot;,
-    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
-    &quot;type&quot; : &quot;...&quot;,
-    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  } ],
-  &quot;resourceSignature&quot; : &quot;...&quot;,
-  &quot;policyLabels&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-  &quot;name&quot; : &quot;...&quot;,
-  &quot;options&quot; : {
-    &quot;property1&quot; : { },
-    &quot;property2&quot; : { }
-  },
-  &quot;rowFilterPolicyItems&quot; : [ {
-    &quot;rowFilterInfo&quot; : {
-      &quot;filterExpr&quot; : &quot;...&quot;
-    },
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ],
-    &quot;delegateAdmin&quot; : true,
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -1048,78 +1003,46 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  }, {
-    &quot;rowFilterInfo&quot; : {
-      &quot;filterExpr&quot; : &quot;...&quot;
-    },
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ],
     &quot;delegateAdmin&quot; : true,
-    &quot;accesses&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;isAllowed&quot; : true
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;isAllowed&quot; : true
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
-  &quot;resources&quot; : {
-    &quot;property1&quot; : {
-      &quot;isExcludes&quot; : true,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-      &quot;isRecursive&quot; : true
-    },
-    &quot;property2&quot; : {
-      &quot;isExcludes&quot; : true,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-      &quot;isRecursive&quot; : true
-    }
-  },
-  &quot;isDenyAllElse&quot; : true,
-  &quot;isAuditEnabled&quot; : true,
   &quot;validitySchedules&quot; : [ {
     &quot;recurrences&quot; : [ {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
+      &quot;interval&quot; : { },
+      &quot;schedule&quot; : { }
     }, {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
+      &quot;interval&quot; : { },
+      &quot;schedule&quot; : { }
     } ],
-    &quot;endTime&quot; : &quot;...&quot;,
     &quot;startTime&quot; : &quot;...&quot;,
-    &quot;timeZone&quot; : &quot;...&quot;
+    &quot;timeZone&quot; : &quot;...&quot;,
+    &quot;endTime&quot; : &quot;...&quot;
   }, {
     &quot;recurrences&quot; : [ {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
+      &quot;interval&quot; : { },
+      &quot;schedule&quot; : { }
     }, {
-      &quot;schedule&quot; : { },
-      &quot;interval&quot; : { }
+      &quot;interval&quot; : { },
+      &quot;schedule&quot; : { }
     } ],
-    &quot;endTime&quot; : &quot;...&quot;,
     &quot;startTime&quot; : &quot;...&quot;,
-    &quot;timeZone&quot; : &quot;...&quot;
+    &quot;timeZone&quot; : &quot;...&quot;,
+    &quot;endTime&quot; : &quot;...&quot;
   } ],
-  &quot;denyExceptions&quot; : [ {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+  &quot;policyPriority&quot; : 12345,
+  &quot;policyType&quot; : 12345,
+  &quot;isAuditEnabled&quot; : true,
+  &quot;zoneName&quot; : &quot;...&quot;,
+  &quot;denyPolicyItems&quot; : [ {
     &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ],
-    &quot;delegateAdmin&quot; : true,
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -1127,18 +1050,18 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  }, {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     } ],
-    &quot;delegateAdmin&quot; : true,
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  }, {
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -1146,26 +1069,37 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    }, {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
-  &quot;policyType&quot; : 12345,
-  &quot;zoneName&quot; : &quot;...&quot;,
+  &quot;service&quot; : &quot;...&quot;,
+  &quot;resources&quot; : {
+    &quot;property1&quot; : {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;isRecursive&quot; : true,
+      &quot;isExcludes&quot; : true
+    },
+    &quot;property2&quot; : {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;isRecursive&quot; : true,
+      &quot;isExcludes&quot; : true
+    }
+  },
   &quot;dataMaskPolicyItems&quot; : [ {
     &quot;dataMaskInfo&quot; : {
       &quot;dataMaskType&quot; : &quot;...&quot;,
       &quot;valueExpr&quot; : &quot;...&quot;,
       &quot;conditionExpr&quot; : &quot;...&quot;
     },
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-    } ],
-    &quot;delegateAdmin&quot; : true,
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -1173,23 +1107,46 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    }, {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   }, {
     &quot;dataMaskInfo&quot; : {
       &quot;dataMaskType&quot; : &quot;...&quot;,
       &quot;valueExpr&quot; : &quot;...&quot;,
       &quot;conditionExpr&quot; : &quot;...&quot;
     },
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;conditions&quot; : [ {
+    &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;isAllowed&quot; : true
     }, {
       &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;isAllowed&quot; : true
     } ],
     &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    }, {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  } ],
+  &quot;rowFilterPolicyItems&quot; : [ {
+    &quot;rowFilterInfo&quot; : {
+      &quot;filterExpr&quot; : &quot;...&quot;
+    },
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -1197,19 +1154,21 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  } ],
-  &quot;denyPolicyItems&quot; : [ {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;conditions&quot; : [ {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     }, {
-      &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
     } ],
-    &quot;delegateAdmin&quot; : true,
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  }, {
+    &quot;rowFilterInfo&quot; : {
+      &quot;filterExpr&quot; : &quot;...&quot;
+    },
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -1217,18 +1176,38 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
-  }, {
-    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    }, {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  } ],
+  &quot;policyItems&quot; : [ {
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;isAllowed&quot; : true
     }, {
       &quot;type&quot; : &quot;...&quot;,
-      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+      &quot;isAllowed&quot; : true
     } ],
     &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    }, {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+  }, {
+    &quot;groups&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;accesses&quot; : [ {
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
@@ -1236,18 +1215,41 @@ Content-Type: application/json
       &quot;type&quot; : &quot;...&quot;,
       &quot;isAllowed&quot; : true
     } ],
-    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ]
+    &quot;delegateAdmin&quot; : true,
+    &quot;users&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;conditions&quot; : [ {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    }, {
+      &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;type&quot; : &quot;...&quot;
+    } ],
+    &quot;roles&quot; : [ &quot;...&quot;, &quot;...&quot; ]
   } ],
-  &quot;policyPriority&quot; : 12345,
-  &quot;description&quot; : &quot;...&quot;,
+  &quot;policyLabels&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+  &quot;resourceSignature&quot; : &quot;...&quot;,
+  &quot;isDenyAllElse&quot; : true,
+  &quot;name&quot; : &quot;...&quot;,
   &quot;serviceType&quot; : &quot;...&quot;,
+  &quot;description&quot; : &quot;...&quot;,
+  &quot;conditions&quot; : [ {
+    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;type&quot; : &quot;...&quot;
+  }, {
+    &quot;values&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;type&quot; : &quot;...&quot;
+  } ],
+  &quot;options&quot; : {
+    &quot;property1&quot; : { },
+    &quot;property2&quot; : { }
+  },
   &quot;createTime&quot; : 12345,
+  &quot;id&quot; : 12345,
   &quot;updatedBy&quot; : &quot;...&quot;,
   &quot;version&quot; : 12345,
-  &quot;updateTime&quot; : 12345,
-  &quot;id&quot; : 12345,
   &quot;createdBy&quot; : &quot;...&quot;,
   &quot;guid&quot; : &quot;...&quot;,
+  &quot;updateTime&quot; : 12345,
   &quot;isEnabled&quot; : true
 }
                 </code>
@@ -1274,13 +1276,13 @@ Content-Type: application/json
           <tbody>
           <tr>
             <td><abbr data-toggle="tooltip" data-placement="top" title="Use the &quot;Accept: application/json&quot; HTTP header to request that this media type be provided by the server."><span class="response-type">application/json</span></abbr></td>
-            <td><span class="datatype-reference"><a href="json_RangerRoleList.html">RangerRoleList</a>
+            <td><span class="datatype-reference">array of <a href="json_RangerRole.html">RangerRole</a>
  (JSON)</span></td>
             <td rowspan="2" class="multi-row-description"><span class="response-description"></span></td>
           </tr>
           <tr>
             <td><abbr data-toggle="tooltip" data-placement="top" title="Use the &quot;Accept: application/xml&quot; HTTP header to request that this media type be provided by the server."><span class="response-type">application/xml</span></abbr></td>
-            <td><span class="datatype-reference"><a href="xml_ns0_rangerRoleList.html">rangerRoleList</a>
+            <td><span class="datatype-reference">list of <a href="xml_ns0_rangerRole.html">rangerRole</a>
  (XML)</span></td>
           </tr>
           </tbody>
@@ -1308,91 +1310,44 @@ HTTP/1.1 200 OK
 Content-Type: application/json
 
                 <code class="prettyprint language-js">
-{
+[ {
+  &quot;createdByUser&quot; : &quot;...&quot;,
+  &quot;groups&quot; : [ {
+    &quot;name&quot; : &quot;...&quot;,
+    &quot;isAdmin&quot; : true
+  }, {
+    &quot;name&quot; : &quot;...&quot;,
+    &quot;isAdmin&quot; : true
+  } ],
+  &quot;users&quot; : [ {
+    &quot;name&quot; : &quot;...&quot;,
+    &quot;isAdmin&quot; : true
+  }, {
+    &quot;name&quot; : &quot;...&quot;,
+    &quot;isAdmin&quot; : true
+  } ],
+  &quot;name&quot; : &quot;...&quot;,
+  &quot;options&quot; : {
+    &quot;property1&quot; : { },
+    &quot;property2&quot; : { }
+  },
+  &quot;description&quot; : &quot;...&quot;,
   &quot;roles&quot; : [ {
-    &quot;options&quot; : {
-      &quot;property1&quot; : { },
-      &quot;property2&quot; : { }
-    },
-    &quot;createdByUser&quot; : &quot;...&quot;,
-    &quot;groups&quot; : [ {
-      &quot;isAdmin&quot; : true,
-      &quot;name&quot; : &quot;...&quot;
-    }, {
-      &quot;isAdmin&quot; : true,
-      &quot;name&quot; : &quot;...&quot;
-    } ],
-    &quot;description&quot; : &quot;...&quot;,
-    &quot;roles&quot; : [ {
-      &quot;isAdmin&quot; : true,
-      &quot;name&quot; : &quot;...&quot;
-    }, {
-      &quot;isAdmin&quot; : true,
-      &quot;name&quot; : &quot;...&quot;
-    } ],
-    &quot;users&quot; : [ {
-      &quot;isAdmin&quot; : true,
-      &quot;name&quot; : &quot;...&quot;
-    }, {
-      &quot;isAdmin&quot; : true,
-      &quot;name&quot; : &quot;...&quot;
-    } ],
     &quot;name&quot; : &quot;...&quot;,
-    &quot;createTime&quot; : 12345,
-    &quot;updatedBy&quot; : &quot;...&quot;,
-    &quot;version&quot; : 12345,
-    &quot;updateTime&quot; : 12345,
-    &quot;id&quot; : 12345,
-    &quot;createdBy&quot; : &quot;...&quot;,
-    &quot;guid&quot; : &quot;...&quot;,
-    &quot;isEnabled&quot; : true
-  }, {
-    &quot;options&quot; : {
-      &quot;property1&quot; : { },
-      &quot;property2&quot; : { }
-    },
-    &quot;createdByUser&quot; : &quot;...&quot;,
-    &quot;groups&quot; : [ {
-      &quot;isAdmin&quot; : true,
-      &quot;name&quot; : &quot;...&quot;
-    }, {
-      &quot;isAdmin&quot; : true,
-      &quot;name&quot; : &quot;...&quot;
-    } ],
-    &quot;description&quot; : &quot;...&quot;,
-    &quot;roles&quot; : [ {
-      &quot;isAdmin&quot; : true,
-      &quot;name&quot; : &quot;...&quot;
-    }, {
-      &quot;isAdmin&quot; : true,
-      &quot;name&quot; : &quot;...&quot;
-    } ],
-    &quot;users&quot; : [ {
-      &quot;isAdmin&quot; : true,
-      &quot;name&quot; : &quot;...&quot;
-    }, {
-      &quot;isAdmin&quot; : true,
-      &quot;name&quot; : &quot;...&quot;
-    } ],
+    &quot;isAdmin&quot; : true
+  }, {
     &quot;name&quot; : &quot;...&quot;,
-    &quot;createTime&quot; : 12345,
-    &quot;updatedBy&quot; : &quot;...&quot;,
-    &quot;version&quot; : 12345,
-    &quot;updateTime&quot; : 12345,
-    &quot;id&quot; : 12345,
-    &quot;createdBy&quot; : &quot;...&quot;,
-    &quot;guid&quot; : &quot;...&quot;,
-    &quot;isEnabled&quot; : true
-  } ],
-  &quot;listSize&quot; : 12345,
-  &quot;list&quot; : [ { }, { } ],
-  &quot;startIndex&quot; : 12345,
-  &quot;pageSize&quot; : 12345,
-  &quot;totalCount&quot; : 12345,
-  &quot;resultSize&quot; : 12345,
-  &quot;sortType&quot; : &quot;...&quot;,
-  &quot;sortBy&quot; : &quot;...&quot;
-}
+    &quot;isAdmin&quot; : true
+  } ],
+  &quot;createTime&quot; : 12345,
+  &quot;id&quot; : 12345,
+  &quot;updatedBy&quot; : &quot;...&quot;,
+  &quot;version&quot; : 12345,
+  &quot;createdBy&quot; : &quot;...&quot;,
+  &quot;guid&quot; : &quot;...&quot;,
+  &quot;updateTime&quot; : 12345,
+  &quot;isEnabled&quot; : true
+} ]
                 </code>
               </pre>
             </div>
@@ -1412,13 +1367,24 @@ Content-Type: application/json
             <th>name</th>
             <th>type</th>
             <th>description</th>
+            <th>default</th>
+            <th>constraints</th>
           </tr>
           </thead>
           <tbody>
           <tr>
+            <td><span class="parameter-name">createNonExistUserGroup</span></td>
+            <td>query</td>
+            <td><span class="parameter-description"></span></td>
+            <td><span class="parameter-default-value">false</span></td>
+            <td><span class="parameter-constraints">boolean</span></td>
+          </tr>
+          <tr>
             <td><span class="parameter-name">serviceName</span></td>
             <td>query</td>
             <td><span class="parameter-description"></span></td>
+            <td><span class="parameter-default-value">&nbsp;</span></td>
+            <td><span class="parameter-constraints">&nbsp;</span></td>
           </tr>
           </tbody>
         </table>
@@ -1481,41 +1447,41 @@ Accept: application/json
 
                 <code class="prettyprint language-js">
 {
-  &quot;options&quot; : {
-    &quot;property1&quot; : { },
-    &quot;property2&quot; : { }
-  },
   &quot;createdByUser&quot; : &quot;...&quot;,
   &quot;groups&quot; : [ {
-    &quot;isAdmin&quot; : true,
-    &quot;name&quot; : &quot;...&quot;
-  }, {
-    &quot;isAdmin&quot; : true,
-    &quot;name&quot; : &quot;...&quot;
-  } ],
-  &quot;description&quot; : &quot;...&quot;,
-  &quot;roles&quot; : [ {
-    &quot;isAdmin&quot; : true,
-    &quot;name&quot; : &quot;...&quot;
+    &quot;name&quot; : &quot;...&quot;,
+    &quot;isAdmin&quot; : true
   }, {
-    &quot;isAdmin&quot; : true,
-    &quot;name&quot; : &quot;...&quot;
+    &quot;name&quot; : &quot;...&quot;,
+    &quot;isAdmin&quot; : true
   } ],
   &quot;users&quot; : [ {
-    &quot;isAdmin&quot; : true,
-    &quot;name&quot; : &quot;...&quot;
+    &quot;name&quot; : &quot;...&quot;,
+    &quot;isAdmin&quot; : true
   }, {
-    &quot;isAdmin&quot; : true,
-    &quot;name&quot; : &quot;...&quot;
+    &quot;name&quot; : &quot;...&quot;,
+    &quot;isAdmin&quot; : true
   } ],
   &quot;name&quot; : &quot;...&quot;,
+  &quot;options&quot; : {
+    &quot;property1&quot; : { },
+    &quot;property2&quot; : { }
+  },
+  &quot;description&quot; : &quot;...&quot;,
+  &quot;roles&quot; : [ {
+    &quot;name&quot; : &quot;...&quot;,
+    &quot;isAdmin&quot; : true
+  }, {
+    &quot;name&quot; : &quot;...&quot;,
+    &quot;isAdmin&quot; : true
+  } ],
   &quot;createTime&quot; : 12345,
+  &quot;id&quot; : 12345,
   &quot;updatedBy&quot; : &quot;...&quot;,
   &quot;version&quot; : 12345,
-  &quot;updateTime&quot; : 12345,
-  &quot;id&quot; : 12345,
   &quot;createdBy&quot; : &quot;...&quot;,
   &quot;guid&quot; : &quot;...&quot;,
+  &quot;updateTime&quot; : 12345,
   &quot;isEnabled&quot; : true
 }
                 </code>
@@ -1529,41 +1495,41 @@ Content-Type: application/json
 
                 <code class="prettyprint language-js">
 {
-  &quot;options&quot; : {
-    &quot;property1&quot; : { },
-    &quot;property2&quot; : { }
-  },
   &quot;createdByUser&quot; : &quot;...&quot;,
   &quot;groups&quot; : [ {
-    &quot;isAdmin&quot; : true,
-    &quot;name&quot; : &quot;...&quot;
-  }, {
-    &quot;isAdmin&quot; : true,
-    &quot;name&quot; : &quot;...&quot;
-  } ],
-  &quot;description&quot; : &quot;...&quot;,
-  &quot;roles&quot; : [ {
-    &quot;isAdmin&quot; : true,
-    &quot;name&quot; : &quot;...&quot;
+    &quot;name&quot; : &quot;...&quot;,
+    &quot;isAdmin&quot; : true
   }, {
-    &quot;isAdmin&quot; : true,
-    &quot;name&quot; : &quot;...&quot;
+    &quot;name&quot; : &quot;...&quot;,
+    &quot;isAdmin&quot; : true
   } ],
   &quot;users&quot; : [ {
-    &quot;isAdmin&quot; : true,
-    &quot;name&quot; : &quot;...&quot;
+    &quot;name&quot; : &quot;...&quot;,
+    &quot;isAdmin&quot; : true
   }, {
-    &quot;isAdmin&quot; : true,
-    &quot;name&quot; : &quot;...&quot;
+    &quot;name&quot; : &quot;...&quot;,
+    &quot;isAdmin&quot; : true
   } ],
   &quot;name&quot; : &quot;...&quot;,
+  &quot;options&quot; : {
+    &quot;property1&quot; : { },
+    &quot;property2&quot; : { }
+  },
+  &quot;description&quot; : &quot;...&quot;,
+  &quot;roles&quot; : [ {
+    &quot;name&quot; : &quot;...&quot;,
+    &quot;isAdmin&quot; : true
+  }, {
+    &quot;name&quot; : &quot;...&quot;,
+    &quot;isAdmin&quot; : true
+  } ],
   &quot;createTime&quot; : 12345,
+  &quot;id&quot; : 12345,
   &quot;updatedBy&quot; : &quot;...&quot;,
   &quot;version&quot; : 12345,
-  &quot;updateTime&quot; : 12345,
-  &quot;id&quot; : 12345,
   &quot;createdBy&quot; : &quot;...&quot;,
   &quot;guid&quot; : &quot;...&quot;,
+  &quot;updateTime&quot; : 12345,
   &quot;isEnabled&quot; : true
 }
                 </code>
@@ -1625,25 +1591,26 @@ Content-Type: application/json
 
                 <code class="prettyprint language-js">
 [ {
-  &quot;tagVersion&quot; : 12345,
-  &quot;policyVersion&quot; : 12345,
+  &quot;policyUpdateTime&quot; : 12345,
+  &quot;description&quot; : &quot;...&quot;,
+  &quot;name&quot; : &quot;...&quot;,
+  &quot;type&quot; : &quot;...&quot;,
   &quot;configs&quot; : {
     &quot;property1&quot; : &quot;...&quot;,
     &quot;property2&quot; : &quot;...&quot;
   },
-  &quot;name&quot; : &quot;...&quot;,
-  &quot;type&quot; : &quot;...&quot;,
-  &quot;policyUpdateTime&quot; : 12345,
-  &quot;description&quot; : &quot;...&quot;,
+  &quot;tagVersion&quot; : 12345,
   &quot;tagUpdateTime&quot; : 12345,
+  &quot;displayName&quot; : &quot;...&quot;,
+  &quot;policyVersion&quot; : 12345,
   &quot;tagService&quot; : &quot;...&quot;,
   &quot;createTime&quot; : 12345,
+  &quot;id&quot; : 12345,
   &quot;updatedBy&quot; : &quot;...&quot;,
   &quot;version&quot; : 12345,
-  &quot;updateTime&quot; : 12345,
-  &quot;id&quot; : 12345,
   &quot;createdBy&quot; : &quot;...&quot;,
   &quot;guid&quot; : &quot;...&quot;,
+  &quot;updateTime&quot; : 12345,
   &quot;isEnabled&quot; : true
 } ]
                 </code>
@@ -1716,25 +1683,26 @@ Accept: application/json
 
                 <code class="prettyprint language-js">
 {
-  &quot;tagVersion&quot; : 12345,
-  &quot;policyVersion&quot; : 12345,
+  &quot;policyUpdateTime&quot; : 12345,
+  &quot;description&quot; : &quot;...&quot;,
+  &quot;name&quot; : &quot;...&quot;,
+  &quot;type&quot; : &quot;...&quot;,
   &quot;configs&quot; : {
     &quot;property1&quot; : &quot;...&quot;,
     &quot;property2&quot; : &quot;...&quot;
   },
-  &quot;name&quot; : &quot;...&quot;,
-  &quot;type&quot; : &quot;...&quot;,
-  &quot;policyUpdateTime&quot; : 12345,
-  &quot;description&quot; : &quot;...&quot;,
+  &quot;tagVersion&quot; : 12345,
   &quot;tagUpdateTime&quot; : 12345,
+  &quot;displayName&quot; : &quot;...&quot;,
+  &quot;policyVersion&quot; : 12345,
   &quot;tagService&quot; : &quot;...&quot;,
   &quot;createTime&quot; : 12345,
+  &quot;id&quot; : 12345,
   &quot;updatedBy&quot; : &quot;...&quot;,
   &quot;version&quot; : 12345,
-  &quot;updateTime&quot; : 12345,
-  &quot;id&quot; : 12345,
   &quot;createdBy&quot; : &quot;...&quot;,
   &quot;guid&quot; : &quot;...&quot;,
+  &quot;updateTime&quot; : 12345,
   &quot;isEnabled&quot; : true
 }
                 </code>
@@ -1748,25 +1716,26 @@ Content-Type: application/json
 
                 <code class="prettyprint language-js">
 {
-  &quot;tagVersion&quot; : 12345,
-  &quot;policyVersion&quot; : 12345,
+  &quot;policyUpdateTime&quot; : 12345,
+  &quot;description&quot; : &quot;...&quot;,
+  &quot;name&quot; : &quot;...&quot;,
+  &quot;type&quot; : &quot;...&quot;,
   &quot;configs&quot; : {
     &quot;property1&quot; : &quot;...&quot;,
     &quot;property2&quot; : &quot;...&quot;
   },
-  &quot;name&quot; : &quot;...&quot;,
-  &quot;type&quot; : &quot;...&quot;,
-  &quot;policyUpdateTime&quot; : 12345,
-  &quot;description&quot; : &quot;...&quot;,
+  &quot;tagVersion&quot; : 12345,
   &quot;tagUpdateTime&quot; : 12345,
+  &quot;displayName&quot; : &quot;...&quot;,
+  &quot;policyVersion&quot; : 12345,
   &quot;tagService&quot; : &quot;...&quot;,
   &quot;createTime&quot; : 12345,
+  &quot;id&quot; : 12345,
   &quot;updatedBy&quot; : &quot;...&quot;,
   &quot;version&quot; : 12345,
-  &quot;updateTime&quot; : 12345,
-  &quot;id&quot; : 12345,
   &quot;createdBy&quot; : &quot;...&quot;,
   &quot;guid&quot; : &quot;...&quot;,
+  &quot;updateTime&quot; : 12345,
   &quot;isEnabled&quot; : true
 }
                 </code>
@@ -1828,356 +1797,357 @@ Content-Type: application/json
 
                 <code class="prettyprint language-js">
 [ {
-  &quot;implClass&quot; : &quot;...&quot;,
-  &quot;contextEnrichers&quot; : [ {
-    &quot;enricherOptions&quot; : {
-      &quot;property1&quot; : &quot;...&quot;,
-      &quot;property2&quot; : &quot;...&quot;
-    },
+  &quot;accessTypes&quot; : [ {
+    &quot;impliedGrants&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;name&quot; : &quot;...&quot;,
+    &quot;label&quot; : &quot;...&quot;,
     &quot;itemId&quot; : 12345,
-    &quot;enricher&quot; : &quot;...&quot;
+    &quot;rbKeyLabel&quot; : &quot;...&quot;
   }, {
-    &quot;enricherOptions&quot; : {
-      &quot;property1&quot; : &quot;...&quot;,
-      &quot;property2&quot; : &quot;...&quot;
-    },
-    &quot;name&quot; : &quot;...&quot;,
-    &quot;itemId&quot; : 12345,
-    &quot;enricher&quot; : &quot;...&quot;
-  } ],
-  &quot;rbKeyDescription&quot; : &quot;...&quot;,
-  &quot;configs&quot; : [ {
+    &quot;impliedGrants&quot; : [ &quot;...&quot;, &quot;...&quot; ],
     &quot;name&quot; : &quot;...&quot;,
-    &quot;mandatory&quot; : true,
-    &quot;itemId&quot; : 12345,
-    &quot;validationRegEx&quot; : &quot;...&quot;,
-    &quot;type&quot; : &quot;...&quot;,
-    &quot;validationMessage&quot; : &quot;...&quot;,
-    &quot;subType&quot; : &quot;...&quot;,
-    &quot;uiHint&quot; : &quot;...&quot;,
-    &quot;rbKeyDescription&quot; : &quot;...&quot;,
-    &quot;defaultValue&quot; : &quot;...&quot;,
-    &quot;rbKeyLabel&quot; : &quot;...&quot;,
     &quot;label&quot; : &quot;...&quot;,
-    &quot;description&quot; : &quot;...&quot;,
-    &quot;rbKeyValidationMessage&quot; : &quot;...&quot;
-  }, {
-    &quot;name&quot; : &quot;...&quot;,
-    &quot;mandatory&quot; : true,
     &quot;itemId&quot; : 12345,
-    &quot;validationRegEx&quot; : &quot;...&quot;,
-    &quot;type&quot; : &quot;...&quot;,
-    &quot;validationMessage&quot; : &quot;...&quot;,
-    &quot;subType&quot; : &quot;...&quot;,
-    &quot;uiHint&quot; : &quot;...&quot;,
-    &quot;rbKeyDescription&quot; : &quot;...&quot;,
-    &quot;defaultValue&quot; : &quot;...&quot;,
-    &quot;rbKeyLabel&quot; : &quot;...&quot;,
-    &quot;label&quot; : &quot;...&quot;,
-    &quot;description&quot; : &quot;...&quot;,
-    &quot;rbKeyValidationMessage&quot; : &quot;...&quot;
+    &quot;rbKeyLabel&quot; : &quot;...&quot;
   } ],
+  &quot;label&quot; : &quot;...&quot;,
   &quot;rbKeyLabel&quot; : &quot;...&quot;,
-  &quot;name&quot; : &quot;...&quot;,
-  &quot;enums&quot; : [ {
-    &quot;defaultIndex&quot; : 12345,
-    &quot;elements&quot; : [ {
+  &quot;dataMaskDef&quot; : {
+    &quot;maskTypes&quot; : [ {
       &quot;itemId&quot; : 12345,
-      &quot;label&quot; : &quot;...&quot;,
+      &quot;rbKeyDescription&quot; : &quot;...&quot;,
+      &quot;rbKeyLabel&quot; : &quot;...&quot;,
+      &quot;dataMaskOptions&quot; : {
+        &quot;property1&quot; : &quot;...&quot;,
+        &quot;property2&quot; : &quot;...&quot;
+      },
+      &quot;description&quot; : &quot;...&quot;,
+      &quot;transformer&quot; : &quot;...&quot;,
       &quot;name&quot; : &quot;...&quot;,
-      &quot;rbKeyLabel&quot; : &quot;...&quot;
+      &quot;label&quot; : &quot;...&quot;
     }, {
       &quot;itemId&quot; : 12345,
+      &quot;rbKeyDescription&quot; : &quot;...&quot;,
+      &quot;rbKeyLabel&quot; : &quot;...&quot;,
+      &quot;dataMaskOptions&quot; : {
+        &quot;property1&quot; : &quot;...&quot;,
+        &quot;property2&quot; : &quot;...&quot;
+      },
+      &quot;description&quot; : &quot;...&quot;,
+      &quot;transformer&quot; : &quot;...&quot;,
+      &quot;name&quot; : &quot;...&quot;,
+      &quot;label&quot; : &quot;...&quot;
+    } ],
+    &quot;accessTypes&quot; : [ {
+      &quot;impliedGrants&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;name&quot; : &quot;...&quot;,
       &quot;label&quot; : &quot;...&quot;,
+      &quot;itemId&quot; : 12345,
+      &quot;rbKeyLabel&quot; : &quot;...&quot;
+    }, {
+      &quot;impliedGrants&quot; : [ &quot;...&quot;, &quot;...&quot; ],
       &quot;name&quot; : &quot;...&quot;,
+      &quot;label&quot; : &quot;...&quot;,
+      &quot;itemId&quot; : 12345,
       &quot;rbKeyLabel&quot; : &quot;...&quot;
     } ],
-    &quot;itemId&quot; : 12345,
-    &quot;name&quot; : &quot;...&quot;
-  }, {
-    &quot;defaultIndex&quot; : 12345,
-    &quot;elements&quot; : [ {
-      &quot;itemId&quot; : 12345,
+    &quot;resources&quot; : [ {
+      &quot;recursiveSupported&quot; : true,
       &quot;label&quot; : &quot;...&quot;,
+      &quot;excludesSupported&quot; : true,
+      &quot;parent&quot; : &quot;...&quot;,
+      &quot;matcher&quot; : &quot;...&quot;,
+      &quot;type&quot; : &quot;...&quot;,
+      &quot;accessTypeRestrictions&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;lookupSupported&quot; : true,
+      &quot;isValidLeaf&quot; : true,
+      &quot;matcherOptions&quot; : {
+        &quot;property1&quot; : &quot;...&quot;,
+        &quot;property2&quot; : &quot;...&quot;
+      },
       &quot;name&quot; : &quot;...&quot;,
-      &quot;rbKeyLabel&quot; : &quot;...&quot;
-    }, {
+      &quot;rbKeyLabel&quot; : &quot;...&quot;,
+      &quot;mandatory&quot; : true,
+      &quot;validationMessage&quot; : &quot;...&quot;,
+      &quot;level&quot; : 12345,
       &quot;itemId&quot; : 12345,
+      &quot;uiHint&quot; : &quot;...&quot;,
+      &quot;rbKeyValidationMessage&quot; : &quot;...&quot;,
+      &quot;description&quot; : &quot;...&quot;,
+      &quot;validationRegEx&quot; : &quot;...&quot;,
+      &quot;rbKeyDescription&quot; : &quot;...&quot;
+    }, {
+      &quot;recursiveSupported&quot; : true,
       &quot;label&quot; : &quot;...&quot;,
+      &quot;excludesSupported&quot; : true,
+      &quot;parent&quot; : &quot;...&quot;,
+      &quot;matcher&quot; : &quot;...&quot;,
+      &quot;type&quot; : &quot;...&quot;,
+      &quot;accessTypeRestrictions&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;lookupSupported&quot; : true,
+      &quot;isValidLeaf&quot; : true,
+      &quot;matcherOptions&quot; : {
+        &quot;property1&quot; : &quot;...&quot;,
+        &quot;property2&quot; : &quot;...&quot;
+      },
       &quot;name&quot; : &quot;...&quot;,
-      &quot;rbKeyLabel&quot; : &quot;...&quot;
-    } ],
-    &quot;itemId&quot; : 12345,
-    &quot;name&quot; : &quot;...&quot;
-  } ],
+      &quot;rbKeyLabel&quot; : &quot;...&quot;,
+      &quot;mandatory&quot; : true,
+      &quot;validationMessage&quot; : &quot;...&quot;,
+      &quot;level&quot; : 12345,
+      &quot;itemId&quot; : 12345,
+      &quot;uiHint&quot; : &quot;...&quot;,
+      &quot;rbKeyValidationMessage&quot; : &quot;...&quot;,
+      &quot;description&quot; : &quot;...&quot;,
+      &quot;validationRegEx&quot; : &quot;...&quot;,
+      &quot;rbKeyDescription&quot; : &quot;...&quot;
+    } ]
+  },
   &quot;resources&quot; : [ {
-    &quot;lookupSupported&quot; : true,
-    &quot;name&quot; : &quot;...&quot;,
-    &quot;description&quot; : &quot;...&quot;,
-    &quot;isValidLeaf&quot; : true,
-    &quot;uiHint&quot; : &quot;...&quot;,
-    &quot;matcher&quot; : &quot;...&quot;,
-    &quot;accessTypeRestrictions&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-    &quot;validationMessage&quot; : &quot;...&quot;,
+    &quot;recursiveSupported&quot; : true,
+    &quot;label&quot; : &quot;...&quot;,
     &quot;excludesSupported&quot; : true,
+    &quot;parent&quot; : &quot;...&quot;,
+    &quot;matcher&quot; : &quot;...&quot;,
     &quot;type&quot; : &quot;...&quot;,
-    &quot;rbKeyValidationMessage&quot; : &quot;...&quot;,
-    &quot;validationRegEx&quot; : &quot;...&quot;,
-    &quot;itemId&quot; : 12345,
-    &quot;recursiveSupported&quot; : true,
-    &quot;level&quot; : 12345,
+    &quot;accessTypeRestrictions&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;lookupSupported&quot; : true,
+    &quot;isValidLeaf&quot; : true,
     &quot;matcherOptions&quot; : {
       &quot;property1&quot; : &quot;...&quot;,
       &quot;property2&quot; : &quot;...&quot;
     },
-    &quot;rbKeyDescription&quot; : &quot;...&quot;,
-    &quot;parent&quot; : &quot;...&quot;,
-    &quot;rbKeyLabel&quot; : &quot;...&quot;,
-    &quot;label&quot; : &quot;...&quot;,
-    &quot;mandatory&quot; : true
-  }, {
-    &quot;lookupSupported&quot; : true,
     &quot;name&quot; : &quot;...&quot;,
-    &quot;description&quot; : &quot;...&quot;,
-    &quot;isValidLeaf&quot; : true,
-    &quot;uiHint&quot; : &quot;...&quot;,
-    &quot;matcher&quot; : &quot;...&quot;,
-    &quot;accessTypeRestrictions&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;rbKeyLabel&quot; : &quot;...&quot;,
+    &quot;mandatory&quot; : true,
     &quot;validationMessage&quot; : &quot;...&quot;,
-    &quot;excludesSupported&quot; : true,
-    &quot;type&quot; : &quot;...&quot;,
+    &quot;level&quot; : 12345,
+    &quot;itemId&quot; : 12345,
+    &quot;uiHint&quot; : &quot;...&quot;,
     &quot;rbKeyValidationMessage&quot; : &quot;...&quot;,
+    &quot;description&quot; : &quot;...&quot;,
     &quot;validationRegEx&quot; : &quot;...&quot;,
-    &quot;itemId&quot; : 12345,
+    &quot;rbKeyDescription&quot; : &quot;...&quot;
+  }, {
     &quot;recursiveSupported&quot; : true,
-    &quot;level&quot; : 12345,
+    &quot;label&quot; : &quot;...&quot;,
+    &quot;excludesSupported&quot; : true,
+    &quot;parent&quot; : &quot;...&quot;,
+    &quot;matcher&quot; : &quot;...&quot;,
+    &quot;type&quot; : &quot;...&quot;,
+    &quot;accessTypeRestrictions&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+    &quot;lookupSupported&quot; : true,
+    &quot;isValidLeaf&quot; : true,
     &quot;matcherOptions&quot; : {
       &quot;property1&quot; : &quot;...&quot;,
       &quot;property2&quot; : &quot;...&quot;
     },
-    &quot;rbKeyDescription&quot; : &quot;...&quot;,
-    &quot;parent&quot; : &quot;...&quot;,
+    &quot;name&quot; : &quot;...&quot;,
     &quot;rbKeyLabel&quot; : &quot;...&quot;,
-    &quot;label&quot; : &quot;...&quot;,
-    &quot;mandatory&quot; : true
+    &quot;mandatory&quot; : true,
+    &quot;validationMessage&quot; : &quot;...&quot;,
+    &quot;level&quot; : 12345,
+    &quot;itemId&quot; : 12345,
+    &quot;uiHint&quot; : &quot;...&quot;,
+    &quot;rbKeyValidationMessage&quot; : &quot;...&quot;,
+    &quot;description&quot; : &quot;...&quot;,
+    &quot;validationRegEx&quot; : &quot;...&quot;,
+    &quot;rbKeyDescription&quot; : &quot;...&quot;
   } ],
-  &quot;dataMaskDef&quot; : {
+  &quot;options&quot; : {
+    &quot;property1&quot; : &quot;...&quot;,
+    &quot;property2&quot; : &quot;...&quot;
+  },
+  &quot;rowFilterDef&quot; : {
     &quot;accessTypes&quot; : [ {
-      &quot;label&quot; : &quot;...&quot;,
       &quot;impliedGrants&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;name&quot; : &quot;...&quot;,
+      &quot;label&quot; : &quot;...&quot;,
       &quot;itemId&quot; : 12345,
-      &quot;rbKeyLabel&quot; : &quot;...&quot;,
-      &quot;name&quot; : &quot;...&quot;
+      &quot;rbKeyLabel&quot; : &quot;...&quot;
     }, {
-      &quot;label&quot; : &quot;...&quot;,
       &quot;impliedGrants&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;name&quot; : &quot;...&quot;,
+      &quot;label&quot; : &quot;...&quot;,
       &quot;itemId&quot; : 12345,
-      &quot;rbKeyLabel&quot; : &quot;...&quot;,
-      &quot;name&quot; : &quot;...&quot;
+      &quot;rbKeyLabel&quot; : &quot;...&quot;
     } ],
     &quot;resources&quot; : [ {
-      &quot;lookupSupported&quot; : true,
-      &quot;name&quot; : &quot;...&quot;,
-      &quot;description&quot; : &quot;...&quot;,
-      &quot;isValidLeaf&quot; : true,
-      &quot;uiHint&quot; : &quot;...&quot;,
-      &quot;matcher&quot; : &quot;...&quot;,
-      &quot;accessTypeRestrictions&quot; : [ &quot;...&quot;, &quot;...&quot; ],
-      &quot;validationMessage&quot; : &quot;...&quot;,
+      &quot;recursiveSupported&quot; : true,
+      &quot;label&quot; : &quot;...&quot;,
       &quot;excludesSupported&quot; : true,
+      &quot;parent&quot; : &quot;...&quot;,
+      &quot;matcher&quot; : &quot;...&quot;,
       &quot;type&quot; : &quot;...&quot;,
-      &quot;rbKeyValidationMessage&quot; : &quot;...&quot;,
-      &quot;validationRegEx&quot; : &quot;...&quot;,
-      &quot;itemId&quot; : 12345,
-      &quot;recursiveSupported&quot; : true,
-      &quot;level&quot; : 12345,
+      &quot;accessTypeRestrictions&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;lookupSupported&quot; : true,
+      &quot;isValidLeaf&quot; : true,
       &quot;matcherOptions&quot; : {
         &quot;property1&quot; : &quot;...&quot;,
         &quot;property2&quot; : &quot;...&quot;
       },
-      &quot;rbKeyDescription&quot; : &quot;...&quot;,
-      &quot;parent&quot; : &quot;...&quot;,
-      &quot;rbKeyLabel&quot; : &quot;...&quot;,
-      &quot;label&quot; : &quot;...&quot;,
-      &quot;mandatory&quot; : true
-    }, {
-      &quot;lookupSupported&quot; : true,
       &quot;name&quot; : &quot;...&quot;,
-      &quot;description&quot; : &quot;...&quot;,
-      &quot;isValidLeaf&quot; : true,
-      &quot;uiHint&quot; : &quot;...&quot;,
-      &quot;matcher&quot; : &quot;...&quot;,
-      &quot;accessTypeRestrictions&quot; : [ &quot;...&quot;, &quot;...&quot; ],
+      &quot;rbKeyLabel&quot; : &quot;...&quot;,
+      &quot;mandatory&quot; : true,
       &quot;validationMessage&quot; : &quot;...&quot;,
-      &quot;excludesSupported&quot; : true,
-      &quot;type&quot; : &quot;...&quot;,
+      &quot;level&quot; : 12345,
+      &quot;itemId&quot; : 12345,
+      &quot;uiHint&quot; : &quot;...&quot;,

[... 11357 lines stripped ...]