{
    "admin_or_owner": [["role:admin"], ["tenant_id:%(tenant_id)s"]],
    "default": [["rule:admin_or_owner"]],

    "admin_api": [["role:admin"]],
    "extension:provider_network:view": [["rule:admin_api"]],
    "extension:provider_network:set": [["rule:admin_api"]],

    "create_subnet": [],
    "get_subnet": [["rule:admin_or_owner"]],
    "update_subnet": [["rule:admin_or_owner"]],
    "delete_subnet": [["rule:admin_or_owner"]],

    "create_network": [],
    "get_network": [["rule:admin_or_owner"]],
    "update_network": [["rule:admin_or_owner"]],
    "delete_network": [["rule:admin_or_owner"]],

    "create_port": [],
    "get_port": [["rule:admin_or_owner"]],
    "update_port": [["rule:admin_or_owner"]],
    "delete_port": [["rule:admin_or_owner"]]
}