Do we have an option to Automate Wipe device?Solved

Yes, we do. There’s a feature called Automate Wipe Device. It allows you to set up automation rules so that if a device is lost, stolen, or flagged as non‑compliant, it can be wiped automatically. That way, you don’t have to rely on manual intervention—the system takes care of it and keeps sensitive data safe. 

Damn, I didn’t know about this feature. Did my other guys know this huh?  

In our high‑security environment, we can’t afford delays when a device is compromised, because a rooted or jailbroken unit immediately breaks its security and waiting for manual action puts sensitive data at risk. To address this, we created a group  with the condition set to Jailbroken/Rooted = Yes. Then, in the Automate tab, we configured the setup as Wipe Device → Initiate on Activity → Trigger on Device Non‑Compliance, ensuring that any compromised device is automatically wiped the moment it’s detected. 

At our place, we’ve got tons of short‑term contractors coming and going, so waiting on IT tickets to clean up devices was just slowing us down and leaving gaps. Now we run it slick: we made a Dynamic Group called “Terminated Contractor Devices” with the criteria set to User Group = HR Terminated Contractors, tied straight to HR’s user list in Entra ID. The second HR marks someone as done, their device drops into that group. Then in the Automate tab, we configure Wipe Device.Its Initiated on Activity and the Trigger on Device Non‑Compliance, so the wipe fires off instantly.