If some one needs to apply QoS as well as restricted BW on specific application/application group for specific user/subnet then clone that policy (for eg A) directed towards that specific application/application group and make a DVC on top of the current VC. Value are important in this case as you are cloning the DVC from a VC, change guaranteed value of main VC accordingly for e-g if initially main VC in 50M and that policy A is configured for 5% guaranteed and 100% burst, then when making a DVC put values like this, Guaranteed 2.5M (5% of original 50M VC) and burst 50M (100% of original VC), for VC put guaranteed 47.5M(95% of original VC) and burst of 50M (100% of original). In this was you have just cloned policy A from VC and using same amount of total BW. We did this because we want policy A to use 5% guaranteed and 100% burst but we also have to make sure that each user is restricted to specific BW which one can achieve in DVC only, so this way you are restricting the BW for specific applicaition/application group for single host. In setting for DVC select auto for per hot BW and MAX Host but put in a specific value under per host max BW so that even though if burst is available any user can not go beyond that value.