<?xml version="1.0" encoding="UTF-8"?><policy>
	<rule>
		<description>User changing from Manager to Employee</description>
		<conditions>
			<and>
				<if-class-name op="equal">User</if-class-name>
				<if-dest-attr mode="regex" name="Title" op="equal">.*manager.*</if-dest-attr>
				<if-op-attr mode="regex" name="Title" op="not-equal">.*manager.*</if-op-attr>
			</and>
		</conditions>
		<actions>
			<do-set-dest-attr-value name="Group Membership">
				<arg-value type="string">
					<token-text xml:space="preserve">Users\EmployeesGroup</token-text>
				</arg-value>
			</do-set-dest-attr-value>
			<do-clone-op-attr dest-name="Security Equals" src-name="Group Membership"/>
		</actions>
	</rule>
	<rule>
		<description>User changing from Employee to Manager</description>
		<conditions>
			<and>
				<if-class-name op="equal">User</if-class-name>
				<if-dest-attr mode="regex" name="Title" op="not-equal">.*manager.*</if-dest-attr>
				<if-op-attr mode="regex" name="Title" op="equal">.*manager.*</if-op-attr>
			</and>
		</conditions>
		<actions>
			<do-set-dest-attr-value name="Group Membership">
				<arg-value type="string">
					<token-text xml:space="preserve">Users\ManagersGroup</token-text>
				</arg-value>
			</do-set-dest-attr-value>
			<do-clone-op-attr dest-name="Security Equals" src-name="Group Membership"/>
		</actions>
	</rule>
</policy>
