in which order Rules and (App) controls being processed?

1. if devices do not need internet access, just block internet nothing else, because facebook, gaming can not be used.
2. if I block Social will this automatically block tiktok, facebook, snapchat, twitter?
3. in which order are the settings being processed? like Networks - (App) controls sets, Groups - (App) controls set, having devices from different Networks as member? I assume fist network, than groups?

I would do a mix, defining a group with setting to all devices (unless device does not need internet access) and then being more restrictive in each network. how can I keep an overview what is being blocked where? furthermore if I enable Emergency Access for a network, but there are (App) controls set as block=on, it will still block?