For a local, non-global, resource policy, this holds the name of the specific resource user type the policy applies to; for a global policy it is always a zero-length string, and like cermPolicyIsGlobal, this value cannot be changed after the policy is created. This is what actually scopes a local policy's thresholds to just one class of processes rather than the whole device, and its immutability means an admin cannot retarget an existing policy to a different user type later without recreating it. A local policy created with this field set to 'IOS Process' only ever governs thresholds for processes classified under that type.