There is no order. Every Policy is evaluated separately and the policy with the most restrictions will apply. So please make sure that you don't have two policies with the same assignments and different access controls. But for troubleshooting purpose you can analyze the Azure AD sign in logs. There you see the applied CA-Policies.