Policy-based management (PBM) aims to provide flexibility in the management of resources so as to readily reflect changing business goals. However, as organizations increasingly use electronic means for more of their core business operations, the ability to ensure that policies accurately reflect the operation of an organization becomes more challenging. This paper presents a critique of organizational modeling ions used in existing policy and access rule schemes. It then uses a detailed case study to explain how Community Based Policy Management can provide a more flexible approach to managing organizational change than the organizational ions currently proposed for PBM, in particular in comparison to roles.