https://docs.oracle.com/cd/E97706_01/Content/Identity/Concepts/policies.htm#Policies