rules:
  # Allow all workstation users
  - path: /graphql-router/graphql
    methods: [POST]
    groups:
      alw: [1, 2, 3, 4, 5]
      oa: ['*']