For more information, see Managing roles and sub-estates.
To remove a data control rule from a policy: