{
  "_program": {
    "version": "1.0.0",
    "tier": "standard",
    "accessPackageName": "Infrastructure Services baseline",
    "expectedScope": 310,
    "resourceGroupIds": [
      "e1000000-0000-4000-8000-000000000030"
    ]
  },
  "displayName": "AUTO via group membership",
  "description": "Everyone whose organization code is ORG-210",
  "allowedTargetScope": "specificDirectoryUsers",
  "specificAllowedTargets": [
    {
      "@odata.type": "#microsoft.graph.attributeRuleMembers",
      "description": "Everyone whose organization code is ORG-210",
      "membershipRule": "user.memberof -any (group.objectId -in [\"e1000000-0000-4000-8000-000000000099\"])"
    }
  ],
  "automaticRequestSettings": {
    "requestAccessForAllowedTargets": true,
    "removeAccessWhenTargetLeavesAllowedTargets": true,
    "gracePeriodBeforeAccessRemoval": "P7D"
  },
  "accessPackage": {
    "id": "d1000000-0000-4000-8000-000000000030"
  }
}
