- name: "Test2"
      type: allow
      users: ["grafana.elk"]
#      auth_key: usert:test
      ldap_authentication:
        name: "ldap"
      indices: ["*asdasd"]

    - name: "China forbid user"
      type:
        policy: forbid
        response_message: "There is no access to view these logs from your country. To get access, you need to go to jira => create a ticket => project (ELK) => type (Whitelist non PII index pattern)"
      ldap_authentication:
        name: "ldap"
      ldap_authorization:
        name: "ldap"
        groups: ["group"]