If a device has Activation Lock enabled, it can be disabled in GoLive >> Security:
However, if the device has been moved into a different policy than the one it was originally enrolled in (where Automated Device Enrollment was configured), the following error may appear:
After moving the device back into its original policy, Activation Lock can be toggled off without issue.