You can also require admins to enter notes using the Require Notes check box and explain their reasoning when performing these actions. Navigate to Groups & Settings > All Settings > System > Security > Restricted Actions.

Setting Description
Lock Device Require a note for any attempt to lock a device from Device List View or Device Details.
Lock SSO Require a note for any attempt to lock an SSO session from Device List View or Device Details.
Device Wipe Require a note for any attempt to perform a device wipe from Device List View or Device Details.
Enterprise Reset Require a note for any attempt to enterprise reset a device from the Device Details page of a Windows Rugged or Rugged Android device.
Enterprise Wipe Require a note for any attempt to perform an enterprise wipe from Device Details.
Override Job Log Level Require a note prior to attempts to override the default job log level from Groups & Settings > Admin > Diagnostics > Logging.
Reboot Device Require a note prior to a reboot attempt from Devices > List View > Device Details.
Shut Down Require a note prior to a shut down attempt from Devices > List View > Device Details.