Using a container-level access policy