Returns the tenant's policy restrictions. These apply to policy-related operations (e.g. updating policy set, group, or restriction rules). When a restriction applies, the specified approvers must approve before the operation can execute.