Currently, after creating/adding a new policy to a role it is instantly active with no limitations. They could be added by editing this policy. The idea is to specify limitations while creating a new policy e.g. by setting this as next step to follow or by selecting positions from a list which could be located in /policy/create view.