# rbac for sysadmin
projects:
  - system
roles:
  - admin
scope: system
policy:
  *: allow