Problem
Currently, performing a factory reset requires the local administrator password. For remote users, this often means either returning the device to IT or sharing the administrator password with the end user.
Sharing this password is not desirable, as the user may still know valid administrative credentials after the device has been onboarded again.
Suggestion
Provide a separate, restricted permission or authentication method that only allows a Factory Reset, without granting any other local administrator privileges.
Benefit
Secure self-service Factory Reset for remote users
No need to disclose the local administrator password
Less downtime and administrative effort
No unnecessary administrative access for end users