hello all, when you wipe or unenrol a device which has VPP apps installed, are the VPP licenses used released and auto assigned back into the pool of available license's or do you have to manually reclaim the licence via apps, IOS apps, edit the app…

We want to set up a policy/restriction that prevents an Admin from having the "Wipe" option under Actions for specific devices. I've not been able to find where to disable this option except in the Self-Service portal. How do I do this?