Authorization Policies With IIS Don't Work As Expected

I can just add that right to the dashboard script?