more custom

src/main/resources/reference.conf

@@ -513,29 +513,35 @@ resourceTypes = {
   }
   spend-profile = {
     actionPatternObjects = {
-      "share_policy::owner" = {
-        description = "Can grant and revoke a users' admin permission"
+      "create" = {
+        description = "Can create policies"
       }
-      "alter_policies" = {
-        description = "Can alter policies"
+      "update" = {
+        description = "Can update policies"
       }
       "delete" = {
-        description = "Can delete policies/resources"
+        description = "Can delete policies"
       }
-      "read_policies" = {
+      "list" = {
         description = "Can read policies"
       }
+      "link" = {
+        description = "Can link policies"
+      }
+      "share_policy::owner" = {
+        description = "Can grant and revoke a users' owner permission"
+      }
     }
     ownerRoleName = "owner"
     roles = {
       admin = {
         roleActions = ["share_policy::owner"]
       }
       owner = {
-        roleActions = ["share_policy::owner", "read_policies", "alter_policies", "delete"]
+        roleActions = ["create", "update", "delete", "list", "link", "share_policy::owner"]
       }
       user = {
-        roleActions = [ "read_policies", "share_policy::owner"]
+        roleActions = ["list", "link", "share_policy::owner"]
       }
     }
     reuseIds = true