hello again ,
same thing ! you create different policies ( example ; marketingPolicy , salesPolicy , managementPolicy , ... )
then you create global securit groups with the same name and
add these groups ( example the marketingPolicy-group ) to the Marketing-group. ( active directory users and computers - select marketing-group and add in "member off" the marketingPolicy-group )
Greetings , MVC