You can create a configuration profile and disable particular services
like that - Restrictions -> Functionality tab -> iCloud private relay I
would recommend scoping to test on a spare device.
If you uncheck the assign content in purchase volume, give it some time
for available licenses go up and the in use to drop to 0, then reapply
it. I had a similar issue with an app to one or two random iPads.
Four months ago, I had asked support about this. It was a known product
issue with no known timeframe on a fix. I have not actually seen this
cause an issue with a smart or static group in my experience at the very
least.
