<nacm xmlns="urn:ietf:params:xml:ns:yang:ietf-netconf-acm">
  <rule-list>
    <name>almighty</name>
    <group>almighty</group>
    <group>test</group>
    <rule>
      <module-name>*</module-name>
      <access-operations>*</access-operations>
      <action>permit</action>
    </rule>
  </rule-list>
  <groups>
    <group>
      <name>test</name>
      <user-name>smith</user-name>
    </group>
    <group>
      <name>almighty</name>
      <user-name>smith</user-name>
      <user-name>doe</user-name>
    </group>
  </groups>
  <denied-operations>0</denied-operations>
  <denied-data-writes>0</denied-data-writes>
  <denied-notifications>0</denied-notifications>
</nacm>