Add policy for Token resource.