I recently tried setting Apple Business Manager for our ≈20 people SME. The first step was "Domain Lock/Capture" which takes over all Apple accounts for a specific domain. I've never had a worse experience from Apple. The process is buggy, filled with foot-guns and dead ends. It expects huge amounts of work from users who have had their account for more than a few weeks and are expected to remove a lot of their perso…
And we have like 20k or so users with manually created Apple IDs on their company email and every one of them has to be manually resolved. It's a joke.