{
  "_program": {
    "version": "1.0.0",
    "tier": "standard",
    "accessPackageName": "Program Operations baseline",
    "expectedScope": 420,
    "resourceGroupIds": [
      "e1000000-0000-4000-8000-000000000020"
    ]
  },
  "displayName": "AUTO ORG-100 Program Operations",
  "description": "Everyone whose organization code is ORG-100",
  "allowedTargetScope": "specificDirectoryUsers",
  "specificAllowedTargets": [
    {
      "@odata.type": "#microsoft.graph.attributeRuleMembers",
      "description": "Everyone whose organization code is ORG-100",
      "membershipRule": "(user.extensionAttribute10 -eq \"ORG-100\") -and (user.employeeType -in [\"Employee\",\"Contractor\"])"
    }
  ],
  "automaticRequestSettings": {
    "requestAccessForAllowedTargets": true,
    "removeAccessWhenTargetLeavesAllowedTargets": true,
    "gracePeriodBeforeAccessRemoval": "P7D"
  },
  "accessPackage": {
    "id": "d1000000-0000-4000-8000-000000000020"
  }
}
