In AW 9.1.1 Mail management list, the Outlook for iOS entry shows as its own entry, separate from the entry for the enrolled device that it's running on (called device ' A' for this discussion). Device A is enrolled in AW and is compliant, and is approved for native mail access via powershell to O365. Device A also has the ' Outlook for iOS' app installed on it, but it's not tied to the enrolled device. It's listed as its own, non-enrolled, non-compliant entry in the mail management device list. How can I programmatically approve the Outlook app running on compliant devices and deny it on non-compliant, without having to resort to manual approvals on a device-by-device basis?