by default '*' and 'memberOf'