I have create a new policy rule permission for AD domain group (Name: "block_access"), the permission has been configured "Deny All" for Web Application &quo