A mobile device includes a memory having at least one delegated administrator stored thereon, the delegated administrator is configured to apply a policy to the mobile device based on at least one permission a delegated administrator configured to apply a policy to the mobile device based on the at least one permission. The mobile device also includes at least one processor having a mobile device management (MDM) framework. The MDM framework receives the at least one permission from the device administrator, delegates the at least one permission to the delegated administrator, and enforces the policy on the mobile device.