In all my testing I never noticed this before - but in 8.5.1 my users can change their Assigned Policies in the NAB.
My users have ‘author’ access to the NAB, and are limited to the fields that they can edit (Personal Title, Internet Password, Format Pref for mail, etc) - but I found that they can also change their assigned Policy.
Is this a bug - or is this ‘working as expected’?