rules:
  # /features is called for all roles.
  - path: /features
    methods: [GET]
    profiles:
      InsightsProfile: ['*']
      LabelProfile: ['*']
      OrchAdminProfile: ['*']
      PodcastProfile: ['*']
      SettingsProfile: ['*']
      ContentProfile: ['*']

  # Allow all GET calls for Admin user.
  - path: <*>
    methods: [GET]
    profiles:
      LabelProfile: [administrator]
      OrchAdminProfile: ['*']