groups:
  - name: "permission.user.user.group"
    def:
      - name: "permission.user.user.any"
        namespace: "user.user"
        action: "*"
        internal: true
      - name: "permission.user.user.read"
        namespace: "user.user"
        action: "read"
      - name: "permission.user.user.create"
        namespace: "user.user"
        action: "create"  
      - name: "permission.user.user.update"
        namespace: "user.user"
        action: "update"
      - name: "permission.user.user.delete"
        namespace: "user.user"
        action: "delete"

  - name: "permission.user.admin.user.group"
    side: HOST_ONLY
    def:
      - name: "permission.user.admin.user.any"
        namespace: "user.admin.user"
        action: "*"
        internal: true
      - name: "permission.user.admin.user.read"
        namespace: "user.admin.user"
        action: "read"
      - name: "permission.user.admin.user.create"
        namespace: "user.admin.user"
        action: "create"
      - name: "permission.user.admin.user.update"
        namespace: "user.admin.user"
        action: "update"
      - name: "permission.user.admin.user.delete"
        namespace: "user.admin.user"
        action: "delete"

  - name: "permission.user.role.group"
    def:
      - name: "permission.user.role.any"
        namespace: "user.role"
        action: "*"
        internal: true
      - name: "permission.user.role.read"
        namespace: "user.role"
        action: "read"
      - name: "permission.user.role.create"
        namespace: "user.role"
        action: "create"
      - name: "permission.user.role.update"
        namespace: "user.role"
        action: "update"
      - name: "permission.user.role.delete"
        namespace: "user.role"
        action: "delete"