Provide access to change parameters in specific project

[davidt-gh]

I've split my argocd to project name "gh" and "default".
I want to provide some users to override parameters in "gh" project, so I did this:

  rbac:
    policy.default: role:readonly
    policy.csv: |
      p, role:gh, applications, get,      gh/*, allow
      p, role:gh, applications, create,   gh/*, allow
      p, role:gh, applications, update,   gh/*, allow
      p, role:gh, applications, override, gh/*, allow
      p, role:gh, applications, sync,     gh/*, allow
      p, role:gh, applications, action/*, gh/*, allow
      g, [email protected], role:gh

But I'm getting error:

Unable to save changes: permission denied: applications, update, gh/gh-xyz, sub: ChlkYXZpZHRAZ3Jhc3Nob3BwZXJsYWJzLmlvEgRzYW1s, iat: 2025-07-22T13:06:04Z

Why is that?