What is access?
Access endpoints monitor and control... access to a Device's unique resolver.
If you create a non-restricted device then you can monitor what IP addresses interact with that Device's resolver. Any IPs you see attached to a device will be able to query the Legacy DNS resolvers (if allocated on a device) and enforce the correct profile.
If you create a restricted Device (Biz feature), these endpoints manage what IPs are allowed to communicate with the restricted Device resolver. Any IP that is not attached to a device will not be able to query it using any DNS protocol.
Click here to learn more about IP Management.