setfacl -m modifies an ACL in place, and the g:devs:rx argument gives the group devs read and execute rights without touching the base mode. The colon syntax is scope:name:permissions, so u:alice:rw would target a single user. Existing entries are overwritten, not duplicated.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.