Can you choose which users can enroll their Macs?

Hi y'all,

So at the moment, every user at our organisation can enroll their Mac and gets managed. Even BYOD Macs.

Can we make a selection which user may enroll their privately owned Macs (BYOD)?

Can we also make a selection only corporately owned devices can be enrolled to Jamf Pro?

I've seen some options, but I'm not grasping all of the information.