This is very simple all you have to know is how that management policy works.
Like it says, the **app permission** manager controls whether an app can be allowed to access system or other apps' resource.
And the **Draw over other apps** manager permits an app to show its notifications or...