{ "subject_scopes": { "subject_security_level": [ "high", "medium", "low" ] }, "action_scopes": { "resource_action": [ "vm_admin", "vm_access", "storage_admin", "storage_access" ] }, "object_scopes": { "object_security_level": [ "high", "medium", "low" ] } }