A network system provided by a network system operator, the network system comprising: means for storing a plurality of device credentials associated with a device group, the device group comprising a plurality of wireless devices and managed by a device group management entity different from the network system operator, each of the plurality of device credentials associated with a different one of the plurality of wireless devices, each of the plurality of wireless devices of the device group coupled or coupleable to the network system over a wireless access network, a paying entity responsible for paying for at least a portion of wireless-access-network usage associated with the device group; means for providing a secure interface configured to assist the device group management entity in creating and managing a device group service policy associated with the device group, the device group service policy configured to assist the network system in controlling device group wireless-access-network communications, the device group wireless-access-network communications comprising one or more attempted or successful communications over the wireless access network, and prevent the device group management entity from modifying a second service policy associated with one or more wireless devices not managed by the device group management entity; means for provisioning one or more elements based on the device group service policy; means for identifying the device group wireless-access-network communications; and means for applying the device group service policy to the device group wireless-access-network communications. means for storing a plurality of device credentials associated with a device group, the device group comprising a plurality of wireless devices and managed by a device group management entity different from the network system operator, each of the plurality of device credentials associated with a different one of the plurality of wireless devices, each of the plurality of wireless devices of the device group coupled or coupleable to the network system over a wireless access network, a paying entity responsible for paying for at least a portion of wireless-access-network usage associated with the device group; means for providing a secure interface configured to assist the device group management entity in creating and managing a device group service policy associated with the device group, the device group service policy configured to assist the network system in controlling device group wireless-access-network communications, the device group wireless-access-network communications comprising one or more attempted or successful communications over the wireless access network, and prevent the device group management entity from modifying a second service policy associated with one or more wireless devices not managed by the device group management entity; assist the device group management entity in creating and managing a device group service policy associated with the device group, the device group service policy configured to assist the network system in controlling device group wireless-access-network communications, the device group wireless-access-network communications comprising one or more attempted or successful communications over the wireless access network, and prevent the device group management entity from modifying a second service policy associated with one or more wireless devices not managed by the device group management entity; means for provisioning one or more elements based on the device group service policy; means for identifying the device group wireless-access-network communications; and means for applying the device group service policy to the device group wireless-access-network communications.