We have a requirement where the onboarded users are needed to install and uninstall applications from their devices without having to put admin’s intervention.

Also, with that kind of access, we don’t want them to be able to uninstall certain essential applications.

How can we achieve it, please suggest.