Thanks for the quick response. The bigger picture is we provide a lightweight forwarder that runs on every endpoint to collect information on user activity (anonymized to protect user privacy) which it then sends to a cloud based analytics service.
The problem is how to simplify deploying the macOS forwarder to thousands of endpoints in an MDM managed enterprise. Expecting every endpoint user to authenticate as an administrator is not a great user experience.
Having our analytics server get the needed configuration profile from each endpoint and somehow forward it to the MDM to download is a difficult problem so I'm looking for any creative suggestions.