`resource:F1#reader@group:somegroup#member`