aws appsync graphql transfer @auth

gistfile1.txt

type Building
  @auth(
    rules: [
      {
        allow: groups,
        groups: ["Managers"],
        queries: null,
        mutations: [create, update, delete]
      },
      {
        allow: groups,
        groups: ["Users"],
        queries: [get, list],
        mutations: null
      }
    ]
  )
{
  id: ID!
  name: String!
  address: String!
  units: [Unit!]!
}

type Unit
  @auth(
    rules: [
      {
        allow: groups,
        groups: ["Managers"],
        queries: null,
        mutations: [create, update, delete]
      },
      {
        allow: groups,
        groups: ["Users"],
        queries: [get, list],
        mutations: null
      }
    ]
  )
{
  buildingid: ID!
  unitid: String!
  name: String!
  building: Building!
}