I have a project level acl that includes the following:
job:
- allow: [read,run]
subset:
name:
- job1
This works and my grantee can see and run the job, but cannot view activity and execution history.
I added
resource:
- equals:
kind: event
allow: [read]
and this allows the grantee to see all activity for all jobs.
How can I limit the execution reads to a subset of particular jobs?
Thanks.