With Classic view, we could assign custom allow/block based on groups that were separate from the categories tied to that group. We could have an upper-level group that had category settings that inherited down to all subgroups, but we could still individualize access lists per group.

Would like additional options for assigning access lists, separate from policies.