Defines the list of users that are allowed to login to the device. Entries are of the form user@domain, such as firstname.lastname@example.org. To allow arbitrary users on a domain, use entries of the form *@domain.
If this policy is not configured, there are no restrictions on which users are allowed to sign in. Note that creating new users still requires the DeviceAllowNewUsers policy to be configured appropriately.