Hello, A quick question. I want to allow access to a resource iff the subject satisfies multiple conditions. Say user ‘Alice’ is a member of group ‘Staff’ and is using two devices - one belongs to group ‘Corp’ and the other belongs to group ‘Personal’. I want to express a condition that allows all staff to access an application ‘Foo’ only if they are doing so using their corporate device. How can I express this permission?