. "That being the case, the first policy on the list that a user matches is a policy that will be applied." . . .