Console
Fleet and device page
Answers the question What can you see about each device?
The list
The Devices section shows the whole fleet. The filters at the top select devices by state: online, inactive, offline, awaiting enrollment, profile removed.
The device page
The Overview tab of a device holds its current state.
The "Client" field shows the client version on the handset. A TEE security level means the attestation key is held in the processor's trusted environment. The patch level is checked against the vulnerability catalog: if updates are missing, the page lists the CVEs that apply.
Inventory
The Inventory tab shows what the device is made of.
The handset sends it when the server asks. The time of the last collection is printed at the bottom of the tab.
Apps
The Apps tab shows the applications in the work profile with their versions. The phone sends the list when it connects and whenever it changes.