The Policy Manager app provides the engine for deploying specific app policies to specific groups.