# Role akR-arrstack-user (name = filename): full media access. Nests the
# arrstack front-door permission plus every per-app entitlement, so a member can
# log in at the front door and arrproxy will allow sonarr, radarr and prowlarr.
# For narrower access, assign the individual akP-arrstack-<app> permission groups
# (together with akP-arrstack-user for the door) to a user directly instead.
permissions:
  - akP-arrstack-user
  - akP-arrstack-sonarr
  - akP-arrstack-radarr
  - akP-arrstack-prowlarr