Defines the action Access will take if the policy matches the user. Available values: allow, deny, non_identity, bypass.
allow
deny
non_identity
bypass