Clarify the relationship between Roles and Claims in a Policy definition

[JimKerslake]

The UI tells me that Roles use OR with regard to other Roles,
Claims use AND with regard to other Claims.

But if you specify 1 Role and 1 Claim... do you get AND or OR between them?

The UI and docs could do with making that clear.

[JimKerslake]

All requirements use AND logic at the top level - meaning if you have multiple
requirement types, the user must satisfy ALL of them:

 - Roles: OR logic within roles
   - User needs to be in ANY ONE of the allowed roles
 - Claims: AND logic between claims, OR within claim values
   - User must have ALL required claims
   - For each claim, user can have ANY ONE of the allowed values for that claim
 - RequireAuthenticatedUser: Simple boolean
   - If true, user must be authenticated
 - RequiredUserName: Exact match
   - User must have this specific username
 - AuthenticationSchemes: Restricts which auth schemes are valid
   - If specified, authentication must have come from one of these schemes

So if you have both Roles AND Claims configured, the user must satisfy:

 - Be in ANY ONE of the allowed roles AND
 - Have ALL the required claims

[JimKerslake]

Docs updated to clarify that