Administration Profile Manager

Can someone please advise me?, I have a server with Profile Manager which I am enrolling multiple Apple devices, the problem I have is I want to prevent users des-enroll or delete the profiles that are installed on their devices, and try the GENERAL option and control the Security option to never be deleted, but still allowing it.

For your advice, thank you very much.