{
    "enabled": true,
    "roles": [
    {% for role in roles %}
        "{{ role }}"{% if not loop.last %},{% endif %}
    {% endfor %}
    ],
    "rules": {
        "all" : [
            {
                "field" : { "realm.name" : "oidc1" }
            },
            {
                "field" : {
                    "groups" : [
                    {% for group_id in group_ids %}
                        "{{ group_id }}"{% if not loop.last %},{% endif %}
                    {% endfor %}
                    ]
                }
            }
        ]
    },
    "metadata" : {
        "version" : 1
    }
}
