@meatprofit there is an interesting section starting from here explaining ACL https://datatracker.ietf.org/doc/html/rfc8341#section-3 As an example, if an action is defined as /interfaces/interface/reset-interface, the group must be authorized to (1) read /interfaces and /interfaces/interface and (2) execute on /interfaces/interface/reset-interface. [image: 1702463566494-7251b782-96b8-4416-98ff-cbc4da408612-image.png] glad you have solved anyway