GlobalRole.namespacedRules[key][].resourceNames

ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.