rules:
  # Allow only Admin and OA user.
  - path: <*>
    methods: ['*']
    groups:
      alw: [4]
      oa: ['*']