/organizations/ORG/<thing>/NAME/_acl/PERM Where thing is: clients, data, containers, cookbooks, environments groups, roles, nodes, users or /organizations/ORG/organization/_acl/PERM or /users/NAME/_acl/PERM

Where PERM is create,read,update,delete,grant