There seems to be a few essential details missing. What does the company string in the policy refer to?
And how is the custom claim(s) added to the raw_user_meta_data?
There was a refactor to change from company to team and I missed that the screenshot was outdated. I've updated the article to explain this more in-depth. Including setting the claim for a user and how the metadata looks like.