Fully managed

In the Ultra Transcenders books

MD-102

Each book explains Fully managed in context, with comparison tables and the common traps.

Terms in this definition

• Android Enterprise

  How Google lets organisations manage Android devices that run Google Mobile Services. After a Managed Google Play account is connected, Intune handles four scenarios: fully managed, dedicated, corporate-owned work profile and personally owned work profile.

• Intune

  Microsoft's device management service, once branded Microsoft Endpoint Manager. Its compliance policies are what the compliant-device grant in Conditional Access relies on.

• CONTROL

  Granting this on a securable gives all other permissions on it too, making it the most powerful SQL permission. At database scope that includes UNMASK and ALTER ANY MASK. Warehouse access through the Admin, Member or Contributor workspace roles carries it.

Related terms

• Apache Cassandra

  A column-family database that is open source. Azure offers a fully managed Cosmos DB API for it that still uses CQL (Cassandra Query Language), letting existing workloads migrate with little rework.

• APK

  The package format used to install Android apps. Intune can push an APK as a line-of-business app, as a private app in Managed Google Play, or straight to fully managed and dedicated devices.

• Azure OpenAI in Foundry Models

  OpenAI models offered by Azure as a fully managed service with guardrails built in, covering GPT-4.1, GPT-5, o-series, image, audio and embeddings. Rather than running infrastructure, you pick a deployment type.

• Azure SQL Managed Instance

  Fully managed SQL Server instance offering almost complete compatibility, including SQL Agent, CLR and queries across databases; disaster recovery to another region is achieved with auto-failover groups.

• Flexible Server

  For Azure Database for PostgreSQL and Azure Database for MySQL alike, the fully managed way to deploy, with fine control over settings and how the database is run.

• Foundry Agent Service

  Fully managed Microsoft Foundry offering in which prompt, voice and hosted agents are created, deployed, run and scaled. Models, tools, guardrails, versioning, tracing and network isolation all come built in.

• Kiosk

  A locked-down mode where a device can run only one app or a few chosen apps. On Windows, kiosks can be single-app or multi-app; on Android Enterprise, fully managed and dedicated devices can both use it.

• Knox Mobile Enrollment

  A service from Samsung for enrolling its devices in bulk, with no hands-on setup, so they arrive in Intune as fully managed, dedicated or corporate-owned work profile devices. The enrolment profile lives in Samsung's Knox Admin Portal.