It would be helpful to differentiate users from different locations accessing the same set of policies & slots - to do, double check that current system permits the same policies to be assigned to different groups. And reconsider the 1:1 slot-policy link if necessary (might be tricky)