Privileged access management policy creation