I've just discovered that it appears with 10.14.6 you can now do MDM user approval via screen sharing. Previously you couldn't do this and were presented with an error saying you couldn't do it that way and it had to be done physically at the device.
I wonder if this is intentional due to complaints from customers or this is technically broken.
I'm going to do some more testing but it may now be possible to entirely script this process!
