Sophos Mobile in Central - Application Allow List

Hello,

I'm currently playing with Sophos Mobile Advanced, and have enrolled a Windows 10 device.

I'm managing it via Admin Central and just trying to figure out how to configure a app allow list.

I have setup a list of apps I want to allow via "App Groups", how do I deploy this via a policy?

Thank you