Business Accounts are in early access. See Business Accounts for the model.
Layers
Rules are evaluated in layers from the broadest to the narrowest, and a request must pass every layer that applies.
See Policy Layers for how the layers combine and how a signer can be allowed to modify a rule.