In many cases I need to provide access to additional sites per classrooms or per students while keep the rest of the school general policy unchanged and managed centrally. With Policy 1.0, I was able to create local groups and allow access to these sites per group. Then I assigned students to different groups.

With Policy 2.0 this mechanism has been removed. Would it be possible to provide us with an option to allow local changes to Policy 2.0 provided by a parent group, similarly how this is done in Policy 1.0 and in the google admin console?