Who can remove devices from the zero-touch portal?

Both customers and resellers can remove devices from the zero-touch portal. Customers have direct control over their devices and can unassign them from configurations or delete them entirely. Resellers, who initially provisioned the devices, also retain the ability to manage them within the portal, including removal. This dual control ensures flexibility in device lifecycle management. End users cannot remove devices from the zero-touch portal; their access is limited to using the device, not managing its zero-touch enrollment status. While the reseller initially adds devices, the customer also has management capabilities, making "Only the reseller" incorrect. Similarly, "Only the customer" is incorrect because resellers maintain some management functions.