Beneath Assignments, you'll find three configurable subcategories per policy:
Let's start by taking a look at users and groups.