Self-Enrollment spares you the hassle of sending enrollment requests to every user. When selfenrollment is turned on users can directly enroll their devices from the portal.
Self-enrollment makes use of the users’ AD credentials for authentication. Hence AD users alone can be enrolled likewise. Selfenrollment is not a global option; you can selectively enable it for different domains.
To enable self-enroll, select Admin > AD Settings
Click on any of the AD slots to edit settings. Select the Allow Self Enroll checkbox to turn on self enrollment for the users in this particular domain. If it is deselected, authentication fails and users
won’t be able to enroll their device.