If you allow your users to activate their own devices by self-service, then you need to configure the following policies:
