Login policies:

local - policy that grants rights to log in locally via console
password - policy that grants rights to change the password
api - grants rights to access router via API.
dude - grants rights to log in to dude server.
.......

Config Policies:

ftp - policy that grants full rights to log in remotely via FTP and to transfer files from and to the router.
write - policy that grants write access to the router's configuration, except for user management.
policy - policy that grants user management rights.
         Should be used together with write policy.
         Allows also to see global variables created by other users (requires also 'test' policy).
test - policy that grants rights to run ping, traceroute, bandwidth-test, wireless scan, sniffer, snooper and other test commands