You can also use the integer values for a more terse syntax. This creates the same Create and View privileges.
$Type = 1 -bor 4
Global Access Controls
Global access controls allow you to define an access for a role for all resources of the chosen type.
For example, to allow any user with the ScriptBuilder role to create a script, you can define an access control using the following command. You'll also want to grant the View privilege so that the user can also view scripts.
Tag access controls allow you to specify an access control based on a tag. All tagged resources will have this access control defined. This allows you to group resources and apply access controls to the group.
The following example provides the edit privilege to the ScriptEditor role and the HR tag.