@codemonkeymike The organization can do that from their Device Enrollment Portal, if they are willing to do so. The organization’s device management may also have to be removed. Agree that that sucks for someone in your position but if an individual is giving you a device that’s enrolled in that way usually it’s not theirs to give away.

@codemonkeymike Suspect you are talking about two different things. For a machine owned by an end user, removing the iCloud account and performing a factory reset absolutely makes that Mac available for activation and use by a new user, T2 or no. However, if the device is owned by the end user’s school or employer and enrolled by that organization to their device management, they would have to unenroll it.