A list of action names that are granted by this privilege. This field must exist and cannot be an empty array. Action names can contain any number of printable ASCII characters and must contain at least one of the following characters: / *, :

Optional meta-data. Within the metadata object, keys that begin with _ are reserved for system usage.