Usage Rules and Compliance

Authorized devices only

Manage only devices that you own, administer or have explicit authorization to manage. Users must be informed that the device is supervised and that management policies or remote commands may be applied.

Privacy and data minimization

Collect only data required for device management. Do not access, copy or distribute private device content beyond the scope allowed by Apple MDM and ABM policies. Define retention, access and deletion procedures for sensitive data.

Account and certificate security

• Use individual administrator accounts and least-privilege roles.
• Protect passwords, API tokens, private keys, ABM accounts and certificates.
• Rotate credentials after suspected exposure or staff changes.
• Track certificate expiry dates and maintain tested backups.

High-risk commands

Verify the device, owner, business reason and approval before remote lock, lost mode, erase or network restrictions. Keep an audit record and notify the authorized user when required.

Prohibited use

Do not use the platform for illegal activity, unauthorized surveillance, credential sharing, data leakage, bypassing access controls or managing devices without proper authorization.

For the full operational checklist, see the 简体中文使用规则 or 繁體中文使用規則.