Hi there,
You can use the '[%CurrentUser%]'-token. An example of this would be this access rule XPath [System.owner='[%CurrentUser%]']. In some instances, $currentUser is also available.
Note that you do require an association with the User-entity or one of its specializations.
Hope it helps