Make MDM non-removable by default for ABM hosts

noahtalerman commented 12 months ago

Goal

User story
As an IT admin,
I want my Macs that I ordered on Apple Business Manager (ABM) to be MDM non-removable
so that I can make sure these Macs can't become unmanaged by my organization.

When a Mac automatically enrolls to Fleet using the default automatic enrollment profile, MDM is non-removable for this Mac

[ ] Update the default automatic enrollment profile to set is_supervised to true and is_mdm_removable to false

Risk level: Low / High TODO

Risk description: TODO

[ ] Engineer (@____): Added comment to user story confirming succesful completion of QA.
[ ] QA (@____): Added comment to user story confirming succesful completion of QA.

georgekarrv commented 11 months ago

Hey team! Please add your planning poker estimate with Zenhub @ghernandez345 @gillespi314 @marcosd4h

noahtalerman commented 11 months ago

Hey @zhumo this didn't make it in the upcoming sprint. I added it to the FF doc because we want to come back to it.

noahtalerman commented 10 months ago

Notes from FF doc:

Mike McNeil: Is it taking 3 days for us to make a config change? If so, let's have a call and learn why and decide how to fix it.

Roberto: I wasn't at the estimation, my gut is that this is a 2, but my understanding is that we don't consider 1 point === 1 day at least in g-mdm

There's some added complexity because we need to update the config in ABM as well for each team retroactively.

noahtalerman commented 10 months ago

Hey @zhumo heads up, this didn't make it into the current sprint.

nonpunctual commented 2 weeks ago