Restrictions profiles provide a second layer of device data protection by allowing you to specify and control how, when and where your employees use their devices.

The Restrictions profiles lock down native functionality of Android for Work devices and vary based on device enrollment. The Restrictions profile displays tags labeled Work Managed Device and Work Profile modes. The profile will only affect the Work Profile.

The Restrictions profile displays tags that indicate if the selected restriction will apply towards the Work Profile, Work Managed Device mode or both device types. Note, however, that for Work Profile devices these will only affect the Android for Work badged apps. For example, when configuring restrictions for the Work Profile you can disable access to the work Camera. This will only affect the Android for Work badged camera and not the users personal camera.

Note, there are a handful of system apps that come with the Work Profile by default such as Work Chrome, Google Play, Google settings, Contacts, and Camera – these can be hidden using the restrictions profile and will not affect the user's personal camera.