You can modify the ACL strings for a resource entity under 
               		Role Tasks. You can use the role-based access feature entirely by configuring ACL strings. 
               	 
            
 
            	 
            The supported strings are: 
               	 
            
            	 
             
               		 
               		  
               - allow:*:read 
                  		  
               
- This allows all roles/groups for the Role Task. 
                  		  
               
- deny:*:read 
                  		  
               
- This denies all roles/groups for the Role Task. 
                  		  
               
- allow:MYGROUP1 group:read;…;allow:MYGROUPN group:read 
                  		  
               
- This allows the specified roles/groups for the Role Task.