You manage 2,000 iOS devices across a distributed financial institution, and every one of them needs accurate, up-to-date corporate contacts. The obvious fix, a third-party sync app on each phone, requires broad Exchange Online permissions you cannot safely grant at...