A computer-implemented method comprising: receiving, by an application marketplace server (103; 406; 506) from an administrator server (102; 402; 502) associated with an organisation, a policy (107; 410; 510) that includes data that identifies one or more users that are associated with the organisation and a restricted permission; receiving, by the application marketplace server from a device associated with a particular user that is associated with the organisation, a request (412; 514) to access one or more applications that are distributed through the application marketplace, wherein the request includes data that identifies the particular one of the users; identifying, by the application marketplace server, one or more of the applications that are associated with the restricted permission; and restricting, by the application marketplace server, access by the particular user to the applications that are associated with the restricted permission wherein restricting access to the applications that are associated with the restricted permission comprises providing a user interface that identifies the applications that are associated with the restricted permission, and that includes, for each of the identified applications, an indicator that indicates that access to each of the application that are associated with the restricted permission is restricted, responsive to user selection of a control included in the user interface, providing details, in the user interface, relating to the policy that includes the restricted permission, wherein the user interface comprises a user-selectable control for requesting moderation of the restricted permission by the administrator server associated with the organisation; and responsive to user-selection of the control for requesting moderation of the restriction permission, the application marketplace server receiving an updated policy from the administrator server that includes updated restricted permissions, and the application market place server providing the updated restricted permissions to the particular user. receiving, by an application marketplace server (103; 406; 506) from an administrator server (102; 402; 502) associated with an organisation, a policy (107; 410; 510) that includes data that identifies one or more users that are associated with the organisation and a restricted permission; receiving, by the application marketplace server from a device associated with a particular user that is associated with the organisation, a request (412; 514) to access one or more applications that are distributed through the application marketplace, wherein the request includes data that identifies the particular one of the users; identifying, by the application marketplace server, one or more of the applications that are associated with the restricted permission; and restricting, by the application marketplace server, access by the particular user to the applications that are associated with the restricted permission wherein restricting access to the applications that are associated with the restricted permission comprises providing a user interface that identifies the applications that are associated with the restricted permission, and that includes, for each of the identified applications, an indicator that indicates that access to each of the application that are associated with the restricted permission is restricted, responsive to user selection of a control included in the user interface, providing details, in the user interface, relating to the policy that includes the restricted permission, wherein the user interface comprises a user-selectable control for requesting moderation of the restricted permission by the administrator server associated with the organisation; and responsive to user-selection of the control for requesting moderation of the restriction permission, the application marketplace server receiving an updated policy from the administrator server that includes updated restricted permissions, and the application market place server providing the updated restricted permissions to the particular user.