Company handsets, locked to their purpose. Suspend WhatsApp, the browser, social media and every app nobody needs on a work device — or replace the home screen entirely and leave one app on it. Enrol once; the fleet stays that way.
You author the list in the console. The handset applies it and reports back what it actually managed to apply — so a device that could not comply says so, rather than appearing in a green column while an advert plays on it.
The common thread is that somebody else owns the phone and it was bought to do one job. If the handset is a personal device, this is the wrong product for it and the section below says so plainly.
Both are Android's, not ours, and both are easier to hear now than after a purchase order. The full version of this reasoning is on the device management page.
Device management here is not a separate product bolted to a PTT app — it is the same platform. The console that locks the handset down is the console that runs the channels, the fleet map and the dispatch queue, so a handset gets its policy and its radio from one place and one bill.