DEM enrollment is the recommended way for your scenario. You can enroll up to 1,000 mobile devices with a single Azure Active Directory account by using a device enrollment manager (DEM) account. DEM is an Intune permission that can be applied to an AAD user account and lets the user enroll up to 1,000 devices. A DEM account is useful for scenarios where devices are enrolled and prepared before handing them out to the users of the devices. See the detailed information of DEM enrollment:
https://learn.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-manager-enroll