To have the options to apply these configurations:1) prevent the application from prompting unprivileged users to initiate and update that they cannot apply.2) trigger the application of an update in a non-interactive manner from a privileged account such as a script run by a mobile device Management platform.