@rkeleghan I'd suggest updating your existing profiles. If you create a new one and disable the old one then you introduce a risk that the new one might fail to install after the old is removed.
I second @sdagley If you make a new configuration profile and remove the old one, there will be a window at which neither or both are installed which can or will cause issues. Especially if the new one fails to install or the old one fails to remove. Its best to just modify your existing configuration.
I'd clone the old one, and remove any scopes just for a backup. Then delete it once you know everything is working. If stuff falls apart you have the old working config untouched if needed. If you don't already, add a version number to the profile name so you can easily identify which devices have which configuration profile.