This screen shot shows adding the actual OES authorization policy. In this example, the user weblogic has access to the authorize action of the sayHello and sayHelloBytes resources (targets.)