diff --git a/access_groups.tf b/access_groups.tf
index 7df5a47..5195d71 100644
--- a/access_groups.tf
+++ b/access_groups.tf
@@ -3,3 +3,13 @@
 # =============================================================================
 
 #
+resource "cloudflare_zero_trust_access_policy" "allow_policie" {
+  account_id       = local.cloudflare_account_id
+  name             = "Allow Erfi"
+  decision         = "allow"
+  session_duration = "24h"
+
+  include {
+    group = [cloudflare_zero_trust_access_group.default_groups.id]
+  }
+}
\ No newline at end of file