https://docs.oracle.com/cd/E97706_01/Content/Identity/Concepts/policysyntax.htm