Scope tags. Will it be possible to assign certain OS management, let's take iOS. And use scope tags or RBAC to assign a full os layer including the creation of profiles and policies to a group of admins? Maybe it is better to call it delegation on control for a full OS, including everything around that OS.