Check under the Management tab in Jamf and look for the Activation Lock Bypass Code. You should be able to use that, after restoring the computer, to bypass the Activation Lock and activate the computer. Also, if you computer is in Apple Business Manager, Apple will accept that as Proof of Purchase if you open a ticket to remove the Activation Lock.

We’re currently using Jamf School for iPads, division wide M1 MacBooks and a few intel Devices. I usually only see activation locks when someone uses a personal AppleID. However, activation lock bypass codes are per device and don’t need to be updated. As long as there is a code under the device details, you’re good to go. Turning off activation lock is preference, as a Jamf admin you can get past it and it becomes a mild inconvenience. If you have M1 Macs wiping a device requires you to re-partition the drive and re-install the OS. That is until Monterey comes out and adds in the Erase all Content and Data similar to the iPad version. This will be the thing to use as it doesn’t require an OS reinstall but still wipes all user data and settings.

Hey Mike, Just to further clarify, if the machine didn't come directly from Apple or an authorized retailer (e.g. with supervision out of the box) then I would need to disable iCloud entirely because those don't show in Apple Business Manager. Is is possible to entirely disable all of iCloud in Jamf Now, or is that a Pro only feature? I don't see how to just turn it off entirely, just specific iCloud features.You can retroactively add devices into Apple Business Manager with Apple Configurator (using either an iPhone or another Computer) which would be recommended, but this does also wipe the device so it might not be feasible to establish fleetwide for current devices: https://learn.jamf.com/en-US/bundle/jamf-now-documentation/page/Device_Preparation_for_Automated_Device_Enrollment_with_Apple_Configurator.html  Otherwise in Jamf Now inside the Blueprint you would go to Restrictions > Privacy and Security > and check off "Prevent Changes to Accounts." That will prevent them from signing into an Apple ID, and if you partner that by skipping the Apple ID during enrollment (for Automated Device Enrollment) then they would never be prompted to sign in. If your devices are enrolling via Open Enrollment then this won't work, as devices won't be supervised, and that restriction does require supervision.