Device enrollment settings hierarchy in Profile Manager on Mac
The following is used when determining enrollment settings for a device:
If there are enrollment settings on the device, those settings are used.
If there are no enrollment settings from the device, user settings are used.
If there are no enrollment settings on the device, the device group which contains that device is used.
If there are multiple device groups with enrollment settings which contain that device as a member, the device group is chosen alphabetically.
If there are no enrollment settings from the device, device groups, or user, the user group which contains that user are used.
If there are multiple user groups with enrollment settings which contain that user as a member, the user group is chosen alphabetically.