Hi guys,
thanks for your thoughts, very helpful. I guess the best way forward I figured out is twofold: there are aspects of global policies that are more general expectations and seem to fit better in a membership agreement (or labour contract).
Apart from that I like the way of having a Domain on GCC level: "All Company property & ordinary business affairs" which allows to limit or grant authority via policies as shown in H1 examples above.