If you want a rule to match against a wide range of users or resources, you may intend to use a wildcard. Remember in those cases to use the Like operator rather than =
For example, rule using user.group = "Qlik*" will not match against a user who is a member of a group named Qlikies
Whereas a rule using user.group like "Qlik*" will match against a user who is a member of group Qlikies, QlikSters, QlikSenseUsers, etc