{
  "groups": [
    {
      "capacities": [
        {
          "action": "EVERYTHING",
          "module": "SUPER",
          "object": null,
          "permissions": "lrwx"
        },
        {
          "action": "infrastructure",
          "module": "ADMIN",
          "object": null,
          "permissions": "-rwx"
        },
        {
          "action": "request-audit",
          "module": "LOGIN",
          "object": null,
          "permissions": "-r--"
        },
        {
          "action": "workspaces",
          "module": "STUDIO",
          "object": "/shared",
          "permissions": "lrwx"
        },
        {
          "action": "terminal",
          "module": "STUDIO",
          "object": "/shared",
          "permissions": "---x"
        }
      ],
      "description": "Full system administrators.",
      "grid_x": 4,
      "grid_y": 4,
      "members": [
        "superadmin"
      ],
      "name": "ADMINS"
    },
    {
      "capacities": [
        {
          "action": "secrets",
          "module": "LOGIN",
          "object": null,
          "permissions": "-r--"
        }
      ],
      "description": "Read-only Login vault bootstrap identities.",
      "grid_x": 24,
      "grid_y": 15,
      "members": [
        "venact-boot-admin",
        "venact-boot-studio",
        "venact-boot-compute",
        "venact-boot-mentor"
      ],
      "name": "VAULT-BOOT"
    },
    {
      "capacities": [
        {
          "action": "session",
          "module": "LOGIN",
          "object": null,
          "permissions": "---x"
        },
        {
          "action": "workspaces",
          "module": "STUDIO",
          "object": "/users/$SELF",
          "permissions": "lrwx"
        },
        {
          "action": "terminal",
          "module": "STUDIO",
          "object": "/users/$SELF",
          "permissions": "---x"
        },
        {
          "action": "workspaces",
          "module": "STUDIO",
          "object": "/shared",
          "permissions": "l---"
        },
        {
          "action": "sso-clients",
          "module": "LOGIN",
          "object": "/gitea",
          "permissions": "---x"
        },
        {
          "action": "sso-clients",
          "module": "LOGIN",
          "object": "/git-cntr-d1forgejo",
          "permissions": "---x"
        },
        {
          "action": "sso-clients",
          "module": "LOGIN",
          "object": "/git-cntr-d2forgejo",
          "permissions": "---x"
        },
        {
          "action": "sso-clients",
          "module": "LOGIN",
          "object": "/git-cntr-d3forgejo",
          "permissions": "---x"
        },
        {
          "action": "sso-clients",
          "module": "LOGIN",
          "object": "/git-cntr-d4forgejo",
          "permissions": "---x"
        },
        {
          "action": "sso-clients",
          "module": "LOGIN",
          "object": "/git-cntr-d5forgejo",
          "permissions": "---x"
        }
      ],
      "description": "All authenticated users.",
      "grid_x": 4,
      "grid_y": 15,
      "members": [
        "everyone"
      ],
      "name": "EVERYONE"
    },
    {
      "capacities": [
        {
          "action": "skill-chat",
          "module": "MENTOR",
          "object": null,
          "permissions": "---x"
        },
        {
          "action": "skill-guide",
          "module": "MENTOR",
          "object": null,
          "permissions": "---x"
        },
        {
          "action": "skill-suggest",
          "module": "MENTOR",
          "object": null,
          "permissions": "---x"
        },
        {
          "action": "skill-act",
          "module": "MENTOR",
          "object": null,
          "permissions": "---x"
        },
        {
          "action": "use-connector",
          "module": "MENTOR",
          "object": "/online",
          "permissions": "l--x"
        }
      ],
      "description": "Machine identity for the online (cloud) mentor.",
      "grid_x": 24,
      "grid_y": 4,
      "members": [
        "mentor"
      ],
      "name": "MENTORS-ONLINE"
    },
    {
      "capacities": [
        {
          "action": "skill-chat",
          "module": "MENTOR",
          "object": null,
          "permissions": "---x"
        },
        {
          "action": "skill-guide",
          "module": "MENTOR",
          "object": null,
          "permissions": "---x"
        },
        {
          "action": "skill-suggest",
          "module": "MENTOR",
          "object": null,
          "permissions": "---x"
        },
        {
          "action": "skill-act",
          "module": "MENTOR",
          "object": null,
          "permissions": "---x"
        },
        {
          "action": "use-connector",
          "module": "MENTOR",
          "object": "/local",
          "permissions": "l--x"
        }
      ],
      "description": "Machine identity for the local mentor.",
      "grid_x": 4,
      "grid_y": 29,
      "members": [
        "mentor-local"
      ],
      "name": "MENTORS-LOCAL"
    }
  ],
  "layout": {},
  "roles": [
    {
      "capacities": [
        {
          "action": "EVERYTHING",
          "module": "SUPER",
          "object": null,
          "permissions": "lrwx"
        },
        {
          "action": "infrastructure",
          "module": "ADMIN",
          "object": null,
          "permissions": "-rwx"
        },
        {
          "action": "request-audit",
          "module": "LOGIN",
          "object": null,
          "permissions": "-r--"
        },
        {
          "action": "workspaces",
          "module": "STUDIO",
          "object": "/shared",
          "permissions": "lrwx"
        },
        {
          "action": "terminal",
          "module": "STUDIO",
          "object": "/shared",
          "permissions": "---x"
        }
      ],
      "description": "Full system access.",
      "grid_x": 4,
      "grid_y": 4,
      "members": [
        "superadmin"
      ],
      "merged_to_group_name": "ADMINS",
      "name": "ADMINS"
    },
    {
      "capacities": [
        {
          "action": "secrets",
          "module": "LOGIN",
          "object": null,
          "permissions": "-r--"
        }
      ],
      "description": "Read-only Login vault bootstrap identities.",
      "grid_x": 24,
      "grid_y": 15,
      "members": [
        "venact-boot-admin",
        "venact-boot-studio",
        "venact-boot-compute",
        "venact-boot-mentor"
      ],
      "merged_to_group_name": "VAULT-BOOT",
      "name": "VAULT-BOOT"
    },
    {
      "capacities": [
        {
          "action": "session",
          "module": "LOGIN",
          "object": null,
          "permissions": "---x"
        },
        {
          "action": "workspaces",
          "module": "STUDIO",
          "object": "/users/$SELF",
          "permissions": "lrwx"
        },
        {
          "action": "terminal",
          "module": "STUDIO",
          "object": "/users/$SELF",
          "permissions": "---x"
        },
        {
          "action": "workspaces",
          "module": "STUDIO",
          "object": "/shared",
          "permissions": "l---"
        },
        {
          "action": "sso-clients",
          "module": "LOGIN",
          "object": "/gitea",
          "permissions": "---x"
        },
        {
          "action": "sso-clients",
          "module": "LOGIN",
          "object": "/git-cntr-d1forgejo",
          "permissions": "---x"
        },
        {
          "action": "sso-clients",
          "module": "LOGIN",
          "object": "/git-cntr-d2forgejo",
          "permissions": "---x"
        },
        {
          "action": "sso-clients",
          "module": "LOGIN",
          "object": "/git-cntr-d3forgejo",
          "permissions": "---x"
        },
        {
          "action": "sso-clients",
          "module": "LOGIN",
          "object": "/git-cntr-d4forgejo",
          "permissions": "---x"
        },
        {
          "action": "sso-clients",
          "module": "LOGIN",
          "object": "/git-cntr-d5forgejo",
          "permissions": "---x"
        }
      ],
      "description": "All authenticated users.",
      "grid_x": 4,
      "grid_y": 15,
      "members": [
        "everyone"
      ],
      "merged_to_group_name": "EVERYONE",
      "name": "EVERYONE"
    },
    {
      "capacities": [
        {
          "action": "skill-chat",
          "module": "MENTOR",
          "object": null,
          "permissions": "---x"
        },
        {
          "action": "skill-guide",
          "module": "MENTOR",
          "object": null,
          "permissions": "---x"
        },
        {
          "action": "skill-suggest",
          "module": "MENTOR",
          "object": null,
          "permissions": "---x"
        },
        {
          "action": "skill-act",
          "module": "MENTOR",
          "object": null,
          "permissions": "---x"
        },
        {
          "action": "use-connector",
          "module": "MENTOR",
          "object": "/online",
          "permissions": "l--x"
        }
      ],
      "description": "Machine identity for the online (cloud) mentor.",
      "grid_x": 24,
      "grid_y": 4,
      "members": [
        "mentor"
      ],
      "merged_to_group_name": "MENTORS-ONLINE",
      "name": "MENTORS-ONLINE"
    },
    {
      "capacities": [
        {
          "action": "skill-chat",
          "module": "MENTOR",
          "object": null,
          "permissions": "---x"
        },
        {
          "action": "skill-guide",
          "module": "MENTOR",
          "object": null,
          "permissions": "---x"
        },
        {
          "action": "skill-suggest",
          "module": "MENTOR",
          "object": null,
          "permissions": "---x"
        },
        {
          "action": "skill-act",
          "module": "MENTOR",
          "object": null,
          "permissions": "---x"
        },
        {
          "action": "use-connector",
          "module": "MENTOR",
          "object": "/local",
          "permissions": "l--x"
        }
      ],
      "description": "Machine identity for the local mentor.",
      "grid_x": 4,
      "grid_y": 29,
      "members": [
        "mentor-local"
      ],
      "merged_to_group_name": "MENTORS-LOCAL",
      "name": "MENTORS-LOCAL"
    }
  ],
  "schema_version": 1,
  "stickies": [],
  "user_memberships": []
}