Policy by group instead of group by policy
Personally, I do not know if there is anything going on in this direction, but I would like to suggest that it be overridden or at least given the possibility (as an additional resource for example) of managing policies by group.
In the case of applications:
Application | Sales | Projects | Marketing
Dropbox | no | yes | no
Skype | yes | yes | yes
Photoshop | no | no | yes
In the case of websites:
Website | Sales | Projects | marketing
Facebook | no | no | yes
Google | yes | yes | yes
I believe that this policy management would make the administrator more flexible and agile.
Thank you in advance for your attention.
And I count on the understanding and support of all.
I apologize for the translated English.