Apps entity restrictions