The SCCM 2012 R2 Mobile Device Management Application Manager role is allowed to do the following: