I think I found the answer. The examples shows certificates based on conditional activities, not based on course completion. After enabling conditional activities the "restrict access" appears.
I think it would be nice to have certificates based on course completion, not just on an activity, but I think I can configure what I want based on conditional access.