rules:
  # Allow only OA user.
  - path: <*>
    methods: ['*']
    groups:
      alw: []
      oa: ['*']