role_id: AA
permissions:
  - id: P-001
    name: READ
    type: READ
    resource: "*"
    conditions:
      - type: masking
        enabled: true
      - type: audit
        enabled: true
        
  - id: P-002
    name: QUERY
    type: READ
    resource: "query/*"
    conditions:
      - type: audit
        enabled: true
        
  - id: P-003
    name: EXPORT
    type: READ
    resource: "export/*"
    conditions:
      - type: approval_required
        enabled: true
      - type: audit
        enabled: true