User-approved MDM enrolment
In macOS 10.13.2, user-approved MDM enrolment allows mobile device management (MDM) software additional privileges. As of macOS 11, it’s no longer possible to install profiles using the command line so all new MDM enrolments are approved by the user. User-approved MDM enrolment is different from User Enrolment.