Conditions are defined using so-called property-value pairs. A property is a unique identifier for some item of data, and the value represents the description of it.

The general structure of a security rule condition looks as follows:

[resource.resourcetype = "resourcetypevalue"] [OPERATOR] [(((resource.property = propertyvalue) [OPERATOR (resource.property = propertyvalue)))]

A typical and condition can look like the following example:

resource.resourcetype = "DataConnection" and (user.roles="ContentAdmin")

Above, the security rule applies if the resource type is a DataConnection and, at the same time, the user accessing has been assigned the ContentAdmin administrator role.