Hey everyone. Why do we need to specify a required_action and required_resource in the config for keto_engine_acp_ory? Isn't this information primarily specified on a access rule level? Why the need for a global config for this?

This way you can define (hopefully useful) default. That "default" can also be an empty value. But in principle, you'll want to override them on an access rule level as you said

Thanks for your response @icy-manchester-83109 🙂 When you say it can be an empty value, do you then mean that I can define empty strings as values for the required properties, if I specify at least one access rule?

Yes. This is allowed as well. In the rule you must specify a proper value then.