From daed574428461a201da8ef2c380d27ff0c5caaff Mon Sep 17 00:00:00 2001
From: melpike <79950145+melpike@users.noreply.github.com>
Date: Wed, 29 Jul 2026 11:23:29 -0600
Subject: [PATCH] Update MDM commands documentation with usage details (#49657)

Added note about MDM command limitations and usage of fleetctl.

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
---
 articles/mdm-commands.md                         |   3 +++
 .../images/articles/user-scope-icon-16x16@2x.png | Bin 0 -> 1229 bytes
 2 files changed, 3 insertions(+)
 create mode 100644 website/assets/images/articles/user-scope-icon-16x16@2x.png

diff --git a/articles/mdm-commands.md b/articles/mdm-commands.md
index 4675e5eeb4..ef0cd6bd82 100644
--- a/articles/mdm-commands.md
+++ b/articles/mdm-commands.md
@@ -91,6 +91,9 @@ A `.plist` with the `CommandUUID` key / value added will look something like thi
 </plist>
 ```
 
+> If you're trying to remove macOS configuration profiles via the `RemoveProfile` command, note that this endpoint (and `fleetctl run mdm command`) sends commands on the device channel only. User-scoped profiles installed via the user channel cannot be removed this way. In Fleet, in **host details > OS settings** profiles will have an icon indicator <img src="../website/assets/images/articles/user-scope-icon-16x16@2x.png" alt="user-scope-icon" style="display:inline; margin:0; height:16px; width:16px;"> when it is user-scoped.
+
+
 ### Step 2: Choose a target host
 
 Run the `fleetctl get hosts --mdm` command to get a list of hosts that are enrolled in Fleet and have MDM enabled. This may not be practical in Fleet environments with a large number of hosts without using command line tools to parse the output, e.g.,
diff --git a/website/assets/images/articles/user-scope-icon-16x16@2x.png b/website/assets/images/articles/user-scope-icon-16x16@2x.png
new file mode 100644
index 0000000000000000000000000000000000000000..2c914eee2b46900997f819e0ea96e8b5b676b883
GIT binary patch
literal 1229
zcmV;;1Ty=HP)<h;3K|Lk000e1NJLTq001BW001Be1^@s6b9#F800009a7bBm000&x
z000&x0ZCFM@Bjb+0drDELIAGL9O(c600d`2O+f$vv5yP<VFdsH01k9TSaefwW^{L9
za%BKUX=iO=p0So=000C?Nkl<Zcmd5<y>1&v5T4mPSpwvOegm>f;J^tDq)K5)UAmA8
z5E*GAJ%MCILeh!u0#gP31d*FqDk2`AAQX@yof*J|I-j4wXF#?ki?`#MJO1qM-O)$e
zg%==rw?FgE%zpE82qj0O(W<DWR}CP&LZs?|RORW)XgLDH5D^A|aH=nsgCJ-{W#r=f
zHZ<=3UR9*G3G}7`SVAx!YV__0M}LH~_Z0z)#f#_r1h4}iF%VSe<oLn8;`Kamwi+q^
z2Ox3tCm0wKdTV*!$SBbGd9RK!bPK@|`h3?t9a9Lt3X?fa6@^ge#TC-jfFdP4Xa;|^
z2j;A@z{T=>@Q4uZ)8+LW-J^pw{pR|i2OcO5b@}<C1J9j2ZZ`@2n(WOgK#6R@u<aRx
z^PS`3t0x(7!T~9-Deg;naqWDY0fZNotaGNsE51hd#O3nsag<CvAcV^Wf4jUk5y%QM
zcnb=mfq*szRQAdly1cs0(*xHNYVq~{RB0HKZuqQ7)A>m`C0(Pj!=Cl|tZ>A%&9BM2
zO5G6eXRHwc6F0^C1>ll+`q^m`gZ`AKAm}iE{3b}UGF7BF32z)}_`(JUzQ==>Jm-4H
z;DxcL>sq;p!`jhNC)u-pceh0ZrlAp&x~5=hAt!A7!|{{Cp|j5JHNX=qllva7xmLa<
ze{xn|3_H$xlG+vD!HR?4GljF(mQ_reeqKTmSM%;i_AGs4uRDa~x}u0E0{}Ayr{<SM
zYlt|r0HK1OElbsfgjI7=qpKx3LZ?<`lq1`l3}7jXl0EGcRZ+l>X=PhMh=F|wR@Z;p
z%|y+Q8++TbW{FbRH{WBm;N%3T`0$>=(a>*h>_(=dl8n|j_L%wDBSkX5qKP)`lNkQ}
z_<^l_99Qh*&vb{BnG@k2VHF&*Fi*Dle!JEjXFWm&CCD9^QxANPDzUvk5`98Tu-4U#
zwA6K_I-C)FsKM*Ivl{J)l6{J4|G%XGzz^noQl67ET)rDhGhtd291Sdza>NZ3flU-1
zt5Wq6@Z$13l7M0IE1`t^^R?MYjr&Ih7gs_Q%e`vpJk8Su<&@+3UfLV9Yx0w4j+QN1
z%PNu91VzJbS4C-FlWN%9_?6Qnnj0b{=!{CQA#YTk3p(DSn!xwGqk%e>8QeRZ9JjYr
zDtDpd$f{((r3TCZmocpgwkKThWR4q`RJqYXR^uVe7!p=xdi}Kg($=g!X|+x3iP4ft
zSzdTjK)9%Td~gHi7@WMM#OFi~hTY?KZT#kqAI{GHyZG|fogSu4bq_Ax{OUXS;?|w#
zXHWl~=>>_Pn_qwX8=Llh9=J3*ri{7Uawbo}ls@J79U#{YPhUk>`dXblT_v65kX6VX
z`QHYg--n4ga>8@&!HMo6TrRhY2wdvp6k*t6Nxwk(!C?4^t?qpA$7x0pNzdHFF-cch
r8EHzYV1Ax+QA4DG26YN^e4f7p<sm-6BHC>000000NkvXXu0mjf3$04>

literal 0
HcmV?d00001