Rego rule 2 - Managers can create employees only in their own group

rule2.rego

allow {
  input.attributes.request.http.method == "POST"
  input.parsed_path[0] == "employees"
  jwt.valid
  jwt.payload.Role == "manager"
  jwt.payload.Group == input.parsed_body.userGroup
}