With the new API, one can now manage the access for user account, service account and group. An access rule API grants permission to a subject (user account, service account, group), and has three components: a subject, role and scope. A subject may...