Enrollment Options
Choose the method you want to use to select the device group that devices will be placed in when they are added using this rule.
Note: If you select the option to map LDAP groups to device groups, macOS devices that are enrolled using this rule will receive a macOS user profile only if the user logged into the macOS device when the profile is pushed is the same user whose LDAP credentials were used during enrollment. This restriction applies only the macOS user profiles, not macOS device profiles. For more information about the difference between macOS user profiles and macOS device profiles, see Apple Profile Configurations.
Manual | Manually select the device group that devices will be placed in when they are added using this rule. |
Based on LDAP Group Membership | Map LDAP groups to device groups. Devices whose user is a member of a specified LDAP group will be placed in the corresponding device group. |