A rule contains a service type, one or more actions, and a value. The rule, basically, defines the policy.
A service type defines the type of resource that is being protected.
An action is the name of an operation that can be performed on the resource; examples of web server actions are POST or GET. An allowable action for a human resources service might be to be able to change a home telephone number.
A value defines the permission for the action, for example, allow or deny.