ISE Trustsec rule order

Hey guys, i was wondering if you could help me with this

If we have trustec rules defined like this.

Staff SGT allowed access to core network SGT (10.0.0.0/24) Staff SGT not allowed access to dev server SGT (10.0.0.1) same network as core

What order will the rules be processed? Would this work? (block access to dev but not to core) The trustsec matrix isnt very informative when it comes to this.

Thanks!

AK