Go to Devices > Chrome > Settings > Users & browsers.
Scroll down to the Enrollment controls tab and look for the Enrollment permissions policy.
Select the Orgazational Unit where the user is located.
Verify that the Enrollment permissions policy is not configured as Do not allow users in this organization to enroll new or re-enroll existing devices.If so please change it to Allow users in this organization to new or re-enroll existing devices.
Try to enroll the device again.
Cause
The Enrollment permissions policy was incorrectly configured for the affected user.