/capability/securedFunction[@name=" "] cmInitCanUseMobileAdministration cmInitCanUseMobileAdministrationDescription canUseMobileAdministration CAMID(": ") setPolicy grant traverse grant execute grant update true