Intune iOS Corporate Device Remote Wipe - where to configure

I am looking for assistance on where I find the configuration that allows us to remotely wipe corporate owned iOS devices. I have found plenty of instructions on HOW to start a remote wipe, however, based on my searches, the ability to perform a remote wipe is NOT granted by default, it has to be configured. I am looking for instructions on where to configure this ability, or where to find evidence that it has already been configured. I have looked under Configuration Policies, enrollment types, and many other places, however the only mention of the ability to wipe I find, is where you can configure for the device to be automatically wiped after a certain number of failed logons. This is not what Im looking for, Im looking for where we configure that a device can be remotely wiped by an admin, in the first place. The easiest way to explain, is if you were auditing someone's Intune configuration, what is the screenshot or file you would provide to prove that this ability is configured and applied to corporately owned devices.