ACLs are specified within an acls element of the CIB. The acls element may contain any number of acl_role, acl_target, and acl_group elements.