user:User1@pve:1: user:User2@pve:1: group:GroupA:User1@pve: group:GroupB:User1@pve: role:Role1:VM.PowerMgmt: role:Role2:VM.Console: acl:1:/vms:@GroupA:Role1: acl:1:/vms:@GroupB:Role2: