The "Update Policy" and "Update Own Policy" permissions grant users the ability to exclude a resource from policy notifications.
Note: those are disabled in the "Standard User" Role by default.