<?xml version="1.0" encoding="UTF-8"?>
	<policy>
		<rule>
			<description>Match Group by Common Name</description>
			<conditions>
				<or>
					<if-class-name op="equal">Group</if-class-name>
				</or>
			</conditions>
			<actions>
				<do-find-matching-object scope="subtree">
					<arg-match-attr name="CN"/>
				</do-find-matching-object>
			</actions>
		</rule>
	</policy>


