If you have multiple profiles scoped to a device each contains a Restrictions payload, the more "limiting" setting will take precedence, e.g. if you allow a service/setting in Profile A, but disallow it in Profile B and both profiles are installed on the device, the disallow from Profile B will take priority.
You'll need to use tags to properly scope the payload to the required devices.