User-approved device management enrollment

In macOS 10.13.2 or later, user-approved device management enrollment allows a device management service’s software additional privileges. As of macOS 11, it’s no longer possible to install profiles using the command line, so the user approves all new enrollments. User-approved device management enrollment is different from User Enrollment.