Public REST API from below linked doc returns devices that are not in ENROLLED state in addition to ENROLLED state. The API should not be returning devices that were not properly enrolled

More...