At least on iOS, only with MDM profiles for managed devices tagged as company owned I believe.