p, role:readonly, applications, get, */*, allow
g, example-org:developers, role:readonly
