Is it possible to enroll macOS, but to not install SelfService app?

Not tested but maybe possible Settings > Computer Management > Security then untick Jamf management framework and Self Service

@test_qweqwe You can simply delete the Self Service app after enrollment if you don't want it (I presume you want to keep the Macs enrolled in Jamf Pro so you can configure Jamf Protect and use the jamf agent to run remediation policies when needed).

Self Service+ is the eventual successor to Self Service, but currently isn't an automatic install option from Jamf Pro. Installing it requires you remove Self Service.

@sdagley Is it possible to manage policy for Jamf Protect on devices where installed directly the Jamf Protect from cloud (not via Jamf Pro enrollment)?

@test_qweqwe I'm not a Jamf Protect customer, so I can't say for 100% certainty, but you will need the ability to deploy Configuration Profiles to Macs running Jamf Protect to configure the agent as well as provide the permissions necessary to run it, and ensure users cannot disable it. That requires an MDM like Jamf Pro.

You can uncheck the "Install Automatically" option in Settings > Self Service. However, as mentioned, there isn’t an automatic option to deploy Self Service + yet.

@sdagley Removing self service would not work if auto deploy is still ticked. It would re-install in next check-in

Thanks for pointing that out @A_Collins . I've never tried removing Self Service intentionally, but I have vague recollections of having to remediate computers with a missing Self Service in years past, so it's good to see the self healing behavior now.