[multjoy]

Yes, there is a collateral intrusion limitation. You cannot simply go on a fishing trip.

Once you have an IMEI number that you can attribute to the suspect, having exhausted all conventional means of finding the data then you go ahead and start requesting billing and cell site data.

Note, however, that this won't tell you what ip addresses have been assigned to that account.