Yes, because they require it for internal apps. But as "user enrollment" so they are very limited in what they can do. See the table at the bottom of this page[1].
For context this is relatively new and is different from the older way of doing things (device enrollment).
1. https://support.apple.com/guide/deployment/user-enrollment-a...