A method performed by a computer system, the method comprising: storing information defining a plurality of network policy groups, wherein each network policy group includes a policy location, a policy role, and one or more network usage policies that specify access permissions for resources available on a network, wherein the policy location defines a specific type of a room in an office space; receiving, from a first network connection point on the network, first client device information indicating that a client device is connected to the first network connection point, wherein the first network connection point is a device to which the client device connects to access the network, wherein a plurality of network connection points provide access to the network and each network connection point is associated with a network connection point location, the first network connection point being one of the plurality of network connection points that is associated with a first network connection point location, the received first client device information identifying a first user role associated with the client device; based on identifying the first network connection point on which the client device is connected, determining a specific location associated with the client device, wherein the specific location corresponds to a type of a room in the office space where the client device operates; identifying, from among the plurality of network policy groups and based on 1) the specific location determined based on the first network connection point and 2) the first user role associated with the client device, a first network policy group associated with both i) a first policy location that corresponds to the type of the room corresponding to the specific location determined as associated with the client device and ii) a policy role that corresponds to the first user role of the client device; and regulating the client device's access to resources available on the network based on the one or more network usage policies associated with the identified first network policy group. storing information defining a plurality of network policy groups, wherein each network policy group includes a policy location, a policy role, and one or more network usage policies that specify access permissions for resources available on a network, wherein the policy location defines a specific type of a room in an office space; receiving, from a first network connection point on the network, first client device information indicating that a client device is connected to the first network connection point, wherein the first network connection point is a device to which the client device connects to access the network, wherein a plurality of network connection points provide access to the network and each network connection point is associated with a network connection point location, the first network connection point being one of the plurality of network connection points that is associated with a first network connection point location, the received first client device information identifying a first user role associated with the client device; based on identifying the first network connection point on which the client device is connected, determining a specific location associated with the client device, wherein the specific location corresponds to a type of a room in the office space where the client device operates; identifying, from among the plurality of network policy groups and based on 1) the specific location determined based on the first network connection point and 2) the first user role associated with the client device, a first network policy group associated with both i) a first policy location that corresponds to the type of the room corresponding to the specific location determined as associated with the client device and ii) a policy role that corresponds to the first user role of the client device; and regulating the client device's access to resources available on the network based on the one or more network usage policies associated with the identified first network policy group.