I would like to use one profile which is dedicated to installing/updating apps, and then I would like to install the apps from that profile onto others.
I've tried this out, however, and it seems that this approach will only work if I use the main profile as my "App Management" profile, since I'm unable to install apps from user profiles to other profiles.
I am thinking, then, that it is reasonable to use the Main profile to manage apps, perhaps revoking network permission to all apps in Main, and from Main I will install apps into whichever User profiles i'd like.
Does anyone have a different approach?