Updated to throw exception that API expects - PolicyNotAuthorized