Having a senior moment here....
Back in 2014 I configured cpm oboard asa playtoy. For whateve reason we didn't progress it and went down the cloudpath route. I then set up a "mydevices" network for our users to register their wpa2-psk devces, using fingerprints to retrict who can use it... Now revisitingdevice onboarding. All my eduroam configs make sense but ....
I have a test user that I assign BYOD operator to and when i log in, yes I can manage all my registered devices .... all 0 of them as its a new user with that role assignment.....
Unfortunately lot of brain cells have died sonce 2014 and no where can I see what to configure in the byod operator to actually give the user the option to onboard a device
Currently running cppm 6.9.0
Rgds
Alex