You can also require admins to enter notes using the Require Notes check box and explain their reasoning when performing these actions. Navigate to Groups & Settings > All Settings > System > Security > Restricted Actions.

Setting Description
Lock Device Require a note for any attempt to lock a device from the Device List View or Device Details pages.
Lock SSO Require a note for any attempt to lock an SSO session from the Device List View or Device Details screens.
Device Wipe Require a note for any attempt to perform a device wipe from the Device List View or Device Details screens.
Enterprise Reset Require a note for any attempt to enterprise reset a device from the Devices Details page of a Windows Rugged or Rugged Android device.
Enterprise Wipe Require a note for any attempt to perform an enterprise wipe from the Devices Details page of a device.
Override Job Log Level Require a note prior to attempts to override the default job log level from Groups & Settings > Admin > Diagnostics > Logging.