In many environments, best practices for payload management include creating unique configuration profiles to achieve separate goals. This approach reduces complexity in terms of configuring the scope of profiles and identifying issues when troubleshooting.
For example, you may want to create one configuration profile for Restrictions, one for Wi-Fi, and one for VPN. Each profile could contain one or multiple payloads—whatever combination of payloads and settings is needed to accomplish the goal you're trying to achieve with the profile.
For more information on optimizing payload planning and management, see Plan your configuration profiles for Apple devices in Apple Platform Deployment.