You must implement MDM for personal Windows 11 devices so they can be managed by Microsoft Intune, users access company data seamlessly, and users sign in to those devices only with their personal accounts. How should these devices be added to Azure AD?

Azure AD registered devices are ideal for personal devices (BYOD) where users sign in with a personal Microsoft account but need to access organizational resources. This option allows Intune management and seamless access to company data without requiring a full organizational account sign-in on the device itself. Hybrid Azure AD joined devices are for organization-owned devices connected to an on-premises Active Directory and synchronized with Azure AD, which doesn't fit the "personal accounts only" requirement. Azure AD joined devices are for organization-owned devices that are directly joined to Azure AD, requiring users to sign in with an organizational account, which also contradicts the personal account requirement.