<?xml version="1.0" encoding="UTF-8"?>
	<policy>
		<rule>
			<description>Scope Filtering</description>
			<conditions>
				<or>
					<if-class-name op="equal">User</if-class-name>
				</or>
				<or>
					<if-src-dn op="not-in-subtree">Users</if-src-dn>
					<if-attr name="Login Disabled" op="equal">True</if-attr>
					<if-attr mode="regex" name="Title" op="equal">.*Consultant.*</if-attr>
					<if-attr mode="regex" name="Title" op="equal">.*Manager.*</if-attr>
				</or>
			</conditions>
			<actions>
				<do-status level="error">
					<arg-string>
						<token-text xml:space="preserve">User doesn't meet required conditions</token-text>
					</arg-string>
				</do-status>
				<do-veto/>
			</actions>
		</rule>
	</policy>
