rules:
  # /features/features is called for all roles.
  - path: /features/features
    methods: [GET]
    groups:
      alw: [1, 2, 3, 4, 5, 6]
      oa: ['*']
  # Allow all GET calls for Admin user.
  - path: <*>
    methods: [GET]
    groups:
      alw: [4]
      oa: ['*']
  # no POST calls allowed over Grass for alw users.