path "auth/ldap/*" { capabilities = ["create", "update", "read", "delete", "list"] }