Currently the order of policies is indeterminate. This task requires two things - first is that the back-end management API supports ordering of policies for a given entity. Second is that the UI should allow the user to re-order them using drag and drop.