src/main/resources/org.apache.jackrabbit.oak.spi.security.user.action.DefaultAuthorizableActionProvider.cfg.json

{
  "enabledActions": [
    "org.apache.jackrabbit.oak.spi.security.user.action.AccessControlAction"
  ],
  "userPrivilegeNames": [
    "jcr:all"
  ],
  "groupPrivilegeNames": [
    "jcr:read"
  ]
}