In every company there is usually a default policy, which website categories can be accessed or not.
With selecting different categories, there is flexibility to fine-tune the default policy.
Additional policies can be added for specific groups of users.
Users are generally assigned to groups in Active Directory.
Specific group of users can be set to have either a more strict or a more free policy.
IP addresses of users are identified and added to the specific policy.