Added 'isAdmin' policy and actual usage of that.