# default rules
# https://docs.openstack.org/keystone/ussuri/configuration/policy.html
"identity:update_user": "rule:admin_or_owner"