For security and privacy reasons, you can disable the ability to perform a full wipe on a BYOD Device.

To disable full wipes for employee-owned devices:

  1. Navigate to Devices > Device Settings > Devices & Users > General > Privacy.
  2. Scroll down to the Commands section and find the Employee Owned column.
  3. Set the Full Wipe option to Prevent and select  Save.

If you disable full wipe for select iOS ownership types, then users enrolling under that ownership type do not see "Erase all content and settings" permissions during profile installation.