Thank you for reaching us. Kindly refer to the below answered for your query,
>> Let say for example, on default policy, you’ll set allow "Dropbox" then add the users who need access to it and on the duplicate policy, you set to block "Dropbox". In this case, it’ll help you manage your policy much easier. So same question....would this result in duplicate settings having to adjust both policies if base policy were adjusted?
Hi Jeff, I guess I made my comments here a bit confusing. However, it won't still be the same since you can adjust the duplicate policy and change its access type so that it won't have duplicate settings from your base policy. There’s also another option you can do. You can create a new separate policy with a fresh configuration, not just cloned the existing base policy, and here you can apply the necessary change you want to add. You can refer to this documentation on how to add a new policy.