Policies can be seen by all users regardless of scope