I'm still having issues provisioning iPhones through my MDM whenever I add any configuration flag related to preventing MDM profile removal. When I try applying these restrictions through a separate configuration profile, nothing happens either.

It's frustrating that Apple states we can prevent MDM profile removal but doesn't provide a clear example of how to implement it. The documentation doesn't explain whether I need to configure a .mobileconfig file, enable something in Apple Business Manager (ABM), or use Apple Configurator. How exactly can I implement this feature? Which flags or configurations are required? I'd appreciate a practical example or a step-by-step guide instead of another generic documentation link.