Add isAdmin policy and test cases