Automatic Enrollment Permissions
There is a administrator permission that either allows or denies the ability to make changes to auto-enrollment and automatic conflict resolution.
We'll want to add this particular permission to any administrator we expect to manage the automatic enrollment of devices. That is, if devices will be allowed to auto-enroll, and whether auto-conflict resolution will (or can be) be enabled.
The permission is very simple to enable for any administrator in the Manage Administrators Assistant:
Typically a new permission would be off by default for pre-existing users, but in this case all pre-existing administartors who had the ability to Modify Clients and Groups will automatically have this new permission enabled.