description: Operators may view and execute registered acceptance jobs only
context:
  project: xas-test-library
for:
  resource:
    - equals:
        kind: job
      allow: [read]
    - equals:
        kind: event
      allow: [read]
  job:
    - equals:
        group: 00-platform-acceptance
      allow: [read, run, kill]
  node:
    - allow: [read, run]
by:
  group: xas-operator
---
description: Operators may see this project, but not create projects or commands
context:
  application: rundeck
for:
  project:
    - equals:
        name: xas-test-library
      allow: [read]
by:
  group: xas-operator