I need to give my end users the ability to enroll their own devices, or
at least let me assign their AD username to a device that I'm enrolling.
To facilitate this, I have added in my office security group to the JSS
User Groups with their privileges...