@Tiana_salal Thanks for posting in our Q&A.
To clarify this issue, could you please check whether the user used to validate the device restriction policy is in the Dynamic User Group? If the user isn't in Dynamic User Group, it will cause this situation.
If there is any update, feel free to let us know.
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.