policy rule, group policies, auth