Guidance for Microsoft Intune app protection policies (MAM) — protecting corporate data inside mobile apps with or without device enrollment. Covers MAM-WE, data protection actions (encrypt, restrict copy/paste, wipe), and Conditional Access for app protection. WHEN: Intune app protection policy, MAM, MAM-WE, protect data in mobile apps, BYOD data protection, selective wipe, restrict copy paste, app-based Conditional Access, manage apps without enrollment.