...
The access control policy evaluation in Gateway allows for the specification of users and groups that exist in other tenants and other storage domains within the Swarm cluster. This is done performed by appending @domain or +tenant qualifications onto a user or group name.
...