A method for managing enrollments of an IoT device is disclosed. The method includes: transmitting a request to enroll the device with a first device management service; receiving, from a server associated with the first device management service, a first policy profile including one or more first device management policies, the first policy profile defining at least one restriction on management of the device by other device management services with which the device enrolls; transmitting a request to enroll the device with a second device management service; receiving, from a server associated with the second device management service, a second policy profile including one or more second device management policies; identifying a subset of the one or more second device management policies which comply with the at least one restriction; and applying the identified subset of the one or more second device management policies on the device.