In general, access rules define which resources can be accessed by which users. They can be defined very broadly (all the users in Group X have access to any corporate resource), or very narrowly (the users in Group Y have Web-only access to a single resource).
In our example, we’ll keep it simple and give the Partners community access to the resource named VAR marketing collateral, and give Employees access to all of the resources. The appliance evaluates the rules in numbered order. If a match is found, the permit or deny action is applied and no further rules are evaluated.