You should not perform an enterprise wipe through Workspace ONE UEM on an enrolled DEP device. Instead, perform a device wipe, so the user is forced to re-enroll when it is reactivated. To discourage an enterprise wipe on DEP devices, Workspace ONE UEM displays an additional warning in the UEM console when performing the command.
Additionally, Workspace ONE UEM recommends restricting the Self-Service Portal (SSP) role for end users from using the device wipe command. You can configure these roles by navigating to Accounts > Users > Roles.