We have techs that need to access the FV PRK for troubleshooting purposes and also rotate the key if they view/use it. The current Role options are too broad and give access to other features that the techs shouldn't have access to.

I'd like to see a user Role option to allow only the rotation of a FV PRK and not the the rest of Push assigned apps and updates. Wipe, lock, remove passcode, locate, and message devices. Enable and disable lost mode for devices. Checking the box for that Role option gives me the rotation option but I don't necessarily want to give the rest of those rights out to techs logging into sMDM.