I still do not understand, what is the big difference between "employee owned" and "corporate dedicated" on iOS?
As long as the device is "supervised" (DEP) I can control the app-store (hide or not).
When app-store is shown, users can install every app they want, I only can build a blacklist to notify users and administrators.
But I can not uninstall apps.
One of the biggest differences between device ownership type is the settings of Privacy.
In many customer type organization groups, we can see some functions in "employee owned" column are disabled such as:
We can let device users to choice device ownership type during enrollment process under below section.
After enrollment, BYOD devices that marked "employee owned" will receive privacy settings of "employee owned" column.