"admin_or_owner": "rule:context_is_admin or tenant_id:%(tenant_id)s"
"admin_only": "rule:context_is_admin"
"regular_user": ""
"shared": "field:vims:shared=True"

"get_vim": "rule:admin_or_owner or rule:shared"