Who can deregister devices from the zero-touch portals?

Both the customer and the reseller can deregister devices from the zero-touch portals. The customer, as the device owner, has full control over their enrolled devices and can remove them as needed. The reseller, who originally sold and provisioned the devices, also retains the ability to deregister devices, often for reasons like returns, replacements, or correcting provisioning errors. End users cannot deregister devices to maintain enterprise control and prevent unauthorized removal from management. While the reseller initially sets up the devices, the customer also has direct access and control over their own zero-touch account.