911 CAD laptops must remain in a locked organization group that help-desk child administrators cannot move. Which control enforces that?
Select an answer to reveal the explanation.
Short Explanation
Think of the 911 OG as a sealed evidence locker: UEM roles decide who has the key to move devices in or out. A Carbon Black org key registers sensors, and an NSX rule does not lock MDM grouping. vCenter folders never become Hub admin rights.
Full Explanation
Workspace ONE UEM organization groups and administrator roles govern which consoles can manage, move, or retire devices. Restricting child-admin roles on the 911 OG keeps CAD laptops from being relocated into a weaker group. Carbon Black org keys authenticate sensor registration; they do not administer UEM device trees. NSX-T firewall sections and vCenter folder ACLs are not UEM endpoint-management controls.