Hey, it would be great if you create a Profile for App Restrictions (Whitelist) the App Installation should be able to be a higher priority (though a setting in the profile) to avoid double configuration need of installations.