# yaml-language-server: $schema=https://api.cerbos.dev/latest/cerbos/policy/v1/Policy.schema.json
---
apiVersion: api.cerbos.dev/v1
resourcePolicy:
  version: default
  resource: content_moderation
  schemas:
    principalSchema:
      ref: cerbos:///principal.json
  importDerivedRoles:
    - content_roles
  rules:
    - name: global_access
      actions: ["view", "edit", "create", "delete"]
      derivedRoles: ["any_tenant_content_moderation_tool_can_manage"]
      effect: EFFECT_ALLOW