Policy Lookup
Why is this agent (or group, type, sub-user) being governed by these policies?
Lookup target
Empty-scope policies apply to everything and aren't shown here — this view answers "which targeted policies hit this thing", not "which policies will run."