Prevent MDM Profile from being removed

Prevent MDM Profile from being removed

We are configuring this for the first time.  I saw a previous post that stated this could be done through an option in the Policies, but what was written in the post is not there to select.

We are trying to prevent a mobile user from being able to 'unmanage' a device.  

The 'MDM Profile' from ZohoCorp goes on the device when it is enrolled and the 'App Catalog' application gets installed.  This is done without a profile being added to the 'Default_IOS_Corporate' group.  The user is able to go into the iPhone settings and remove the 'MDM Profile' and thus make his/her device unmanaged.

How can that be prevented from happening?

                New to ADSelfService Plus?