Policies can only add existing users. To add a user, first use the Endpoint
Encryption Users widget to add a new user and then add that user
account to a policy. It is not possible to assign a new user directly to a policy
using the Endpoint Encryption Users widget.