New iPad - "Invalid profile" Apple Business manager using Enrollment program tokens

So everyone says this but here's the problem. When you're subscription is the "Employee Plan" you can't generate a VPP token. And even if I go to add a device plan to ABM it wants me to select what devices to assign it to but it won't list any of the ipads i have sitting there waiting to be assigned. It's maddening because even though the devies do everything for the enrollment with entra and intune, the ipad still will not let our managed ID's login to the ipads as the main id, says we can only do work profiles.