OptionalaccountOptionalexcludesRules evaluated with a NOT logical operator. To match a policy, a user cannot meet any of the Exclude rules.
Rules evaluated with an OR logical operator. A user needs to meet only one of the Include rules.
OptionalisWhether this is the default group
The name of the Access group.
OptionalrequiresRules evaluated with an AND logical operator. To match a policy, a user must meet all of the Require rules.
OptionalzoneThe Zone ID to use for this endpoint. Mutually exclusive with the Account ID.
The Account ID to use for this endpoint. Mutually exclusive with the Zone ID.