1. A method performed by a network system, the method comprising: storing a plurality of device credentials associated with a device group, the device group comprising a plurality of wireless devices, the device group managed at least in part by a device-group management entity that is different from a network system operator associated with the network system, each of the plurality of device credentials associated with a different one of the plurality of wireless devices, each of the plurality of wireless devices of the device group coupled or capable of being coupled to the network system over a wireless access network; providing a secure interface configured to assist the device-group management entity in creating or modifying at least a portion of a device-group service policy associated with the device group, the device-group service policy configured to assist the network system in controlling, monitoring, or accounting for device-group wireless-access-network communications, the device-group wireless-access-network communications comprising one or more attempted or successful communications over the wireless access network, the device-group wireless-access-network communications associated with the device group; provisioning one or more elements based on the device-group service policy; identifying the device-group wireless-access-network communications; and applying the device-group service policy based on the identified device-group wireless-access-network communications.