But more often, it is created or heavily tweaked by an IT administrator creating groups and permissions using the MDM application or service.

FORBES: How Many Kinds of Enterprise App Stores are There Today?