The reply to all of those is it relies upon how your employer has configured Microsoft merchandise on their admin facet.
They’ll implement not one of the doable levers to handle the apps in every of your 4 situations so they’re all equal at that second.
Down the street, they may change issues to tighten up what restrictions they impose.
Ultimately, all the things boils down to 2 fundamental info:
- They personal the gadget attributable to claiming it within the portal they’ve with Apple and so they can pressure distant enrollment every time it’s wiped.
- They push a MDM payload (or compel you to self enroll) after which iOS tells you precisely what it has achieved to change your gadget underneath profiles.
It’s not clear what sensible drawback you face and you’d should be express with display screen photographs and precise iOS variations for us to go deeper into state of affairs 1 (which appears very unusual or unlikely).
4 is a private gadget so no administration apart from what the app sends again to Microsoft.
2-3 displays my “enrollment” textual content above.