Hi all,   I am new to MDM deployment, and I have our organization's requirements - specifically: 1. The ability to erase the entire phone if needed 2. The ability for users to add apps through google play or apple store on their own (without the admin having to approve the app).   I have tried both the device ownership setup and also the work profile BYOD. As I understand it, the device ownership has the ability to erase the entire phone - but I have not figured out a way to allow applications to be added by the user themselves - there is no access to the open google play store.  The work profile BYOD allows for the google play store, as it is outside the container - but the "erase phone" ability is limited to the work profile container only.   Is there any settings that I am missing that will allow for both of those requirements? Thanks. ... View more