Network groups are container objects that contain one or more member ipNetwork objects, each of which represents a range of IP addresses.
Although a network group object can be a member of multiple policies, you may find that creating separate network group objects for each policy provides needed flexibility in case IP address coverage requirements vary over time among policies.