This screenshot shows creating role mapping policies in the OES console.