cedar-policy-cli 4.10.0

permit (principal, action, resource)
when { principal.jobLevel > 5 };