When I cloned the base policy I had the option to assign users or a group to it. This capability doesn't exist for the base policy so how do I know who has it and who I can remove it from?
I think I already answered this question in your other thread, so I will only copy/past the last sentence here: "Maybe we should improve the usability here a little bit, because if you clone the base policy, the cloned policy becomes an ordinary policy, as if you would have created a new one."