gistfile1.txt

---
description: 'Devteam General User, read/run access'
context:
  application: 'rundeck'
for:
  resource:
    - allow: 'read'
  project:
    - allow: ["read", "run"]
by:
  group:
    - 'devteam'
---
description: 'DEVTEAM users, read/run access'
context:
  project: 'Drupal'
for:
  resource:
    - allow: ["read", "run"]
  adhoc:
    - deny: '*'
  job:
    - match:
        group: "deploy/.*"
      allow: ["run"]
by:
  group:
    - 'devteam'
---
description: 'UY users, read/run access'
context:
  project: 'Drupal'
for:
  resource:
    - allow: ["read", "run"]
  adhoc:
    - deny: '*'
  job:
    - match:
        group: "uy/.*"
      allow: ["read", "run"]
  node:
    - allow: ["read", "refresh"]
by:
  group:
    - 'uy'
---
description: 'BR users, read/run access'
context:
  project: 'Drupal'
for:
  resource:
    - allow: ["read", "run"]
  adhoc:
    - deny: '*'
  job:
    - match:
        group: "br/.*"
      allow: ["read", "run"]
  node:
    - allow: ["read", "refresh"]
by:
  group:
    - 'br'

gistfile2.txt

Drupal/
   br/
     estrela/
        - job who calls deploy/steps/* 
   deploy
      steps
         - job 1 
         - job 2
         - job 3
   uy/
      cachox/
        - job who calls deploy/steps/*