User-approved MDM enrollment

In macOS 10.13.2 or later, user-approved MDM enrollment allows mobile device management (MDM) software additional privileges. As of macOS 11, it’s no longer possible to install profiles using the command line so all new MDM enrollments are approved by the user. User-approved MDM enrollment is different from User Enrollment.