Intune / Android Fully Managed - stop users removing certs

[Archipelego1]

Hi all,

 

We're using Intune to manage and support some Android 11 devices that are enrolled into Intune as Fully Managed.

 

I've noticed that users are able to go into the Certificates, Settings option and remove Certificates that have been deployed by Intune.

 

Anyone know if there is a way to prevent users being able to remove certificates on Fully Managed devices?

 

Thanks