Very important detail regarding iOS: With the BYOD mode of MDM (not "Supervised Mode" used for company-owned devices), as I understand it, there will be a dialog box which appears on the device and asks you to approve the installation of such configuration profiles.