I think you may have missed Managed Apple IDs, they are exactly for corporate accounts. The administrator can select which services are available and also which devices they can be signed into.