A device management system includes a network device and an information processing apparatus. The network device generates request information including the information used to identify the user, and requests to issue access control information including access restriction information indicating whether or not each of the functions of the network device can be used. The information processing apparatus generates access control information which associates the access restriction information with the user information. The network device further controls the use of the respective functions with respect to the operation input in accordance with the access restriction information included in the generated access control information.