@Dani Cabrera, Thanks for posting in Q&A.
For Activation Lock, it is not suitable. Because when the user sets up Activation Lock on a device. The user then leaves the company and returns the device. Without the user's Apple ID and password, there's no way to reactivate the device.
https://learn.microsoft.com/en-us/mem/intune/remote-actions/device-activation-lock-disable
After researching, there's a setting under Device Restriction policy may help. Device Restrictions > General > Block modification of account settings, it appears to grey out the option and not allow the user to enter an iCloud account.
Hope the above information can help.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.