Do OCI Identity Domain Authorization policies require a service request in order to actually work?

Summary:

We are working with/testing OCI IAM Identity Domain and can create Authorization Policies in the OCI console, but they do not seem to work (e.g., don't protect a test resource).

Content (please ensure you mask any confidential information):

I am currently still on free tier, waiting for my company to get us signed up, but while I was trying to figured out why my policies don't seem to do anything, I found a webpage that I think is about IDCS, and it mentions that Authorization policies can be created while on the free tier, BUT, in order for the policies to actually work, a service request has to be created to request that.