Is it possible to limit a user's profile to only enroll and delete devices?

Unfortunately, this level of adjustment to profiles is not possible in senhasegura.