# yaml-language-server: $schema=https://api.cerbos.dev/latest/cerbos/policy/v1/Policy.schema.json
---
apiVersion: api.cerbos.dev/v1
principalPolicy:
  principal: 7f00d3a7-aa16-4156-8c33-d04c801c1e75
  version: default
  rules:
    - resource: identity
      actions:
      - action: list_tenants
        effect: EFFECT_ALLOW
      - action: view
        effect: EFFECT_ALLOW