I saw this in the documentation:
You can also have multiple wildcards in a string. For example, the following string represents all query permissions for Cost Man