Have i dont this correct, and what do i need to enable / disable?
I was going with setting up and installing all apps in the owner profile, and then use this to 'push' apps to specific users.
I would have a standard daily user account with all the standard stuff - phone, sms, whatsapp, email, social media, notifications etc.
Oner Profile:
Install all apps needed for everything and all user profile using - App Store, App Verifier, Accrescent, Obtanium & logged in 'anonymous' Google Play Store.
Dont allow any apps network access.
Google Play Services - What are the minimum permissions needed so notifications and apps work?
Google Play Store - does this need to be active and have permissions so apps can stay upto date?
User Daily Profile.
Sign into google with personal account to use google contacts, google photos, google drive (i will move away from google at a later date).
Google Play Store - disabled due to all apps being installed from the owner profile.
Google Play Services - What are the minimum permissions needed so notifications and apps work?
Have i dont that correct, or should i only install apps in the owner profile that would be used by all profiles, then use specific profiles to install just their specific apps to be used?
Example:
Not all user profiles will use banking apps, but i installed the apps in the owner profile to be pushed to that banking user. Should i just install them from that specific user account?
Social Media - its likely only one user profile will use these. Should i just install these in that specific user account, or use the owner profile and push them to this user?
Many thanks for any help