Currently a helpdesk admin can enroll/remove enrollments for his/her own user and some clients do see this as a potential risk.
Could we perhaps have a policy, similar to "Helpdesk Option" that has a check box to "Ask credentials of management user". So this policy would have an extra check box that if is it checked, the helpdesk admin that logs into the Helpdesk portal will not be allowed to search/update his own AAF profile.

by: Bruno U. | over a year ago | Configuration