Take 2: Assistance & Training with Microsoft Endpoint Manager/Azure

I would like someone to show me how to use Microsoft Endpoint Manager and how to enroll devices and have control over Office 365 OneDrive SP data with the ability to lockdown or remote erase/control and to apply conditional access policies.

Just for clarity: when a new Microsoft Office 365 user signs into and configures their business premium subscription, I’d like that device to become registered and be managed by the organization via the Endpoint Manager.

I’m not sure how much Azure knowledge is required for this job.

This job will be both technical/training
If you need any additional clarification or more information, please ask.

The first things I'd like to do/learn:

1. How do I enroll a BYOD device’s Office 365 that has the ability to:
- Remote Wipe OneDrive
- Restrict copying and pasting emails
- Conditional Access policies
- Restrict Printing

Thanks so much.
Michael.