Updated 8/17/20 - This is now resolved with the 2004 Intune service release!
We’ve seen an issue with Apple Device Enrollment Program (DEP) tokens when the default enrollment profile for a token is set and then the DEP token needs to be deleted. When you try to delete this specific token, you will see an error notification in the Intune admin console saying “Cannot delete token with existing profiles". This error is seen since Intune does not currently support deleting the default enrollment profile from the admin portal.
The inability to delete a token for a default enrollment profile should not cause any issues when users try to enroll their DEP devices into Intune. However, we’ve heard feedback from customers that they want the ability to delete tokens in this way. Our engineering team is working on a solution in the coming months to help address this Issue.
Note that if you have not set the default enrollment profile for a DEP token, you can currently remove this DEP token from the portal by deleting all associated profiles first.
We'll keep this thread updated with more information. In the mean time let us know if you have any questions!
Blog Post Updates:
8/17/20: With an update that this issue was resolved with the 2004 Intune service release.