User-approved device management enrolment

In macOS 10.13.2 or later, user-approved device management enrolment allows a device management service’s software additional privileges. As of macOS 11, it’s no longer possible to install profiles using the command line, so the user approves all new enrolments. User-approved device management enrolment is different from User Enrolment.