Within policy does a lot of heavy lifting.

It’s generally very simple (by intent) for the employer to deny PTO requests “within policy.”