anchor.diff:          #idp_entitlement{idp = egi, path = [
               #idp_group{type = unit, name = <<"aai.egi.eu">>, privileges = member},
               #idp_group{type = team, name = <<"fedcloud.egi.eu">>, privileges = member},
  -            #idp_group{type = role_holders, name = <<"child">>, privileges = member}
  +            #idp_group{type = role_holders, name = <<"fedcloud.egi.eu - members">>, privileges = member}
           ], privileges = admin}
       },
       {
  
positive.code: -export([parse/3]).
  -export([validation_examples/0]).
  
  %%%===================================================================
  %%% API functions
  %%%===================================================================
  
negative.code:     GroupStructure = binary:replace(GroupStructureEncoded, <<"+">>, <<" ">>, [global]),
      GroupTokens = binary:split(GroupStructure, <<":">>, [global, trim_all]),
  
      {GroupNames, RoleStr} = case lists:last(GroupTokens) of
          <<"role=", Role/binary>> ->
              {lists:sublist(GroupTokens, length(GroupTokens) - 1), Role};
          _ ->
  