add manage control in default policy