I have tried this method (restrictions applied for 'modify account
settings') recently with student-assigned iPads, and it initially worked
great. I 'unrestricted' them, got the students to sign in with Managed
Apple IDs, ensured the iCloud settings ...