You can define device groups and user groups. For each of these groups, you can define different policies. The policies will then be applied to the devices defined in the group. For example, you can define a device group where the devices cannot be used to take photos. Or you can define a user group that is allowed to use a specific WiFi network.