properties:
    - authorization:
        inheritance-strategy: global
        USER:admin:
            - credentials-create
            - credentials-delete
            - credentials-manage-domains
            - credentials-update
            - credentials-view
            - job-build
            - job-cancel
            - job-configure
            - job-delete
            - job-discover
            - job-move
            - job-read
            - job-status
            - job-workspace
            - ownership-jobs
            - run-delete
            - run-replay
            - run-update
            - scm-tag
        GROUP:anonymous:
            - job-read
            - job-extended-read
        authenticated:
            - job-read
            - job-discover
            - job-extended-read
