...
A Root Admin 'admin' calls this command for any VM:
Entity Access Check
- Find all groups the user belongs too: groupIDs = 2
- Find all 'Effective' policies the groups are associated to: policies = 2
- Policy Id 3 and Permission Id 1 allow 'startVirtualMachine' access for ALL VMs .