name: sbx policy allow
synopsis: Add an allow rule for sandboxes
description: |-
    Add a rule that permits sandboxes to access specified resources.

    Allowed resources are accessible within the selected policy scope. If a
    resource matches both an allow and a deny rule, the deny rule takes
    precedence.
usage: sbx policy allow COMMAND
options:
    - name: help
      shorthand: h
      default_value: "false"
      usage: help for allow
inherited_options:
    - name: debug
      shorthand: D
      default_value: "false"
      usage: Enable debug logging
see_also:
    - sbx policy - Manage sandbox policies
    - sbx policy allow network - Allow network access to specified hosts
