@meatprofit
there is an interesting section starting from here explaining ACL

https://datatracker.ietf.org/doc/html/rfc8341#section-3

As an example, if an action is defined as
/interfaces/interface/reset-interface, the group must be authorized
to (1) read /interfaces and /interfaces/interface and (2) execute on
/interfaces/interface/reset-interface.

7251b782-96b8-4416-98ff-cbc4da408612-image.png

glad you have solved anyway