It would be nice to be able to access/view a "resultant set of policies" for a user and/or device to be able to see what policies would apply to them if they were to login and what resources they have access to based on any filtering etc.