auth/opa/user/list.rego

package user.list

default allow := false

allow := true {
    input.role == "admin"
}