- variable: fsGroupChangePolicy
          label: "When should we take ownership?"
          schema:
            type: string
            default: OnRootMismatch
            enum:
              - value: OnRootMismatch
                description: OnRootMismatch
              - value: Always
                description: Always
        - variable: supplementalGroups
          label: Supplemental Groups
          schema:
            type: list
            default: []
            items:
              - variable: supplementalGroupsEntry
                label: Supplemental Group
                schema:
                  type: int