Attaching a user policy