Apple Business MDM Mac Setup

I have a brand-new, company-owned Mac that needs to be enrolled in Apple Business Manager, linked with Microsoft Intune, and locked down so we keep full administrative control without relying on any personal Apple IDs. Scope of work • Create or verify our Apple Business/Managed Apple Account and add the Mac as an organisation-owned device. • Enrol the Mac in our chosen MDM (Intune) and push baseline security: FileVault on, strong password & lock rules, automatic OS updates, recovery keys stored to the organisation. • Grant end users Admin access once the policies are in place. • Pre-install and licence a short list of apps—Microsoft Office, Google Chrome, Cursor, Visual Studio Code, Pg Admin and SQL Server Express—so they appear on first login. No other bloatware. • Ensure the Mac is completely detached from any employee iCloud or personal Apple account. • Provide a concise setup document outlining every step, the profiles deployed, and how we can repeat the process for future Macs. I’m looking for someone who has hands-on experience with Apple Business Manager, macOS MDM workflows and Intune, and can complete the configuration quickly while keeping the company in full control of the device.