You need to ensure that User1 can enroll the devices to meet the technical requirements.

From the Azure Active Directory admin center, assign User1 the Cloud device administrator rote.

From the Azure Active Directory admin center, configure the Maximum number of devices per user setting.

From the Intune admin center, add User1 as a device enrollment manager.

From the Intune admin center, configure the Enrollment restrictions.