accessPolicies:
  - name: "restricted-production-access"
    conditions:
      devicePolicy:
        osConstraints:
          - osType: DESKTOP_MAC
            minimumVersion: "13.5"
        encryptionStatuses:
          - ENCRYPTED
        requireScreenLock: true
