I have some difficulties to design things the right way when it comes to access policies.
Hello,
Well, I've chosen a "one file is associated to a specific group" design.
This way, I have the desired granularity when it comes to say who has access to a queue (Roles being important in this setup as they make things easy to manage).