Description
There are two possible reasons for an Unenroll/Remove Management option showing on the MDM/enrollment profile:
Device was enrolled with open-enrollment
Apple Configurator was used to add the device to Apple Business Manager and therefore it's under provisional enrollment for 30 days.
Per Apple: If the device is given to a user, they have a 30-day provisional period to release the device from Apple School Manager, Apple Business Manager, or Apple Business Essentials, supervision, and MDM. This 30-day provisional period begins after the device is successfully assigned and enrolled.
Achieving a Non-Removable Profile
To have a non-removable profile the device must be enrolled with Auto-Enrollment and be passed the 30 day provisional period if Apple Configurator was used to add the device to Apple Business Manager or Apple School Manager prior to enrollment.
For devices that were initially open-enrolled:
Unenroll the device by sending the unenroll command from Jamf Now or manually removing the profile from the device.
Once the enrollment profile is gone, delete the inventory record from Jamf Now. Open the inventory record under Devices and select Remove from my devices.
Re-enroll with Auto-Enrollment. If the device is not in Apple Business Manager or Apple School Manager it will need to be added before enrollment.
iOS/iPadOS: Follow the steps on Re-enrolling a Managed Device Using Automated Device Enrollment. This will require erasing the device.
macOS: Follow the steps on Re-enrolling a Computer Using Automated Device Enrollment.
If the device was added to Apple Business Manager or Apple School Manager with Apple Configurator: the only option is to wait out the 30 day period. If possible try to enroll the device 30 days before it needs to be given to the end user.