macos – MDM with out Apple Enterprise Supervisor on a Macbook

I’m new to working with Macbooks and must rapidly provision one for a contractor. I must setup MDM (one thing like Jamf or Mosyle) on the machine. However I don’t have an Apple Enterprise Supervisor account and gained’t be getting one (it’s only one laptop computer I’m provisioning).

From my studying, it looks like the way in which to do MDM with out ABM on a Macbook is as follows:

1. Create an admin account on the Macbook
2. Add the MDM to the Macbook utilizing the admin account
3. Setup the person as a normal person account and handle it with the MDM
4. By no means give the person the login for the admin account

Am I right that that is one of the simplest ways so as to add and implement MDM on the machine with out an ABM account?

My understanding is that this technique nonetheless permits the person to carry out a full reset of the machine after which do what they need with it. But when they don’t reset the machine, is their means to avoid the MDM blocked?

Any pointers for this example could be tremendously appreciated.