Identity management
When you enabled identity management for your account, you can specify how users are assigned to policies. If you have multiple web policies, you can use group membership to assign users to policies. The assignment can be static (assigning a user to a policy only when that user is initially registered) or dynamic (changing policy assignment as group membership changes). This is all configured on the Identity Management page: see Configure identity management.
The End Users tab enables you to assign the current policy to a group or groups of synchronized users, overriding the default assignment: