1. A method comprising: enrolling a user device with a management system that manages the user device for an enterprise; generating, using the user device, a device profile that comprises first descriptive data describing the user device at a first instance in time; obtaining, in the user device, a configuration profile that causes the user device to at least obtain at least one watermark template from the management system, wherein the configuration profile further causes the user device to at least comply with at least one compliance rule; identifying, using the user device, a request to access at least one resource; determining, using the user device, whether the at least one compliance rule specifies that the at least one resource is required to be associated with at least one watermark template in order for the user device to be authorized to access the at least one resource; determining, using the user device, whether the at least one watermark template is associated with the at least one resource; associating, using the user device, the at least one watermark template with the at least one resource in response to determining that the at least one watermark template is not associated with the at least one resource; and adding, using the user device, the first descriptive data from the device profile to the at least one watermark template associated with the at least one resource; updating, using the user device, the device profile with second descriptive data describing the user device at a second instance in time; and adding, using the user device, the second descriptive data from the device profile to the at least one watermark template associated with the at least one resource.