{
  "_program": {
    "version": "1.0.0",
    "tier": "standard",
    "accessPackageName": "Program Operations baseline",
    "resourceGroupIds": [
      "e1000000-0000-4000-8000-000000000020"
    ]
  },
  "displayName": "AUTO second policy on Program Ops",
  "description": "Everyone whose organization code is ORG-100",
  "allowedTargetScope": "specificDirectoryUsers",
  "specificAllowedTargets": [
    {
      "@odata.type": "#microsoft.graph.attributeRuleMembers",
      "description": "Everyone whose organization code is ORG-100",
      "membershipRule": "(user.employeeType -eq \"Employee\")"
    }
  ],
  "automaticRequestSettings": {
    "requestAccessForAllowedTargets": true,
    "removeAccessWhenTargetLeavesAllowedTargets": true,
    "gracePeriodBeforeAccessRemoval": "P7D"
  },
  "accessPackage": {
    "id": "d1000000-0000-4000-8000-000000000020"
  }
}
