Allow Get: Allow GET request using an id to get one row.
Allow Get All: Allow GET request to the API root to get all rows (also allows getting single rows).
Allow Post: Allow POST request to insert a new row.
Allow Put: Allow PUT request using an id to update one existing row.
Allow Delete: Allow DELETE request using an id to destroy one existing row.
Allow Delete All: Allow DELETE request to the API root to destroy all (or all filtered) rows. Grant only when really needed.
Allowed Auth Roles: Comma separated list of roles required to use the token. Empty means the token is public; otherwise users must sign in and hold one of the roles (see Roles).