Rule applies when access is requested via:
Any Service
Specified Services and Groups
undo
Service
service
Service Group
services