I'm currently testing PaperCut without using the JSS but have used the mac installers on the clients. /Applications/PaperCut NG/client/mac

@cwood I currently deploy Papercut in my environment. I've attached a screenshot of the permissions I'm using on the working application. I deploy it as a pkg. I hope this helps.
@danielc29 Thanks for pointing this out.
I have made a couple of changes to my package using the same settings as the screenshot and it's now working.
Thanks again
Sorry to resurrect an old thread, but I am still having issues with the Papercut Client. I have the rights the same as above in my install .pkg but when another user logs in, the App in /Applications is greyed out with the circle/slash and Finder says the app has zero bytes. These are AD logins. On 10.13.
Never mind I figured it out. In Composer, where I set the permissions for the .app, I had to click on the 'Advanced(?)' wheel in the bottom right and "Apply permissions to all enclosed items".
I had the permissions right in the .pkg but it still wasn't installing with the right permissions using a policy. So I created a quick script to set the permissions of the .app at install.
#!/bin/sh
chown -R root /Applications/PCClient.app/
chmod -R 777 /Applications/PCClient.app/
That seems to be working; at least on the 1 test Mac I have.
Just a note. Careful with the auto-run on that application. If it doesn't connect it can constantly re-open for the user out of office. I would suggest to change that functionality in the plist, disable the auto-launch, or move the application to start on launch (not controlled by plist)