# default rules # https://docs.openstack.org/keystone/ussuri/configuration/policy.html "identity:update_user": "rule:admin_or_owner"