All of the devices run the exact same profile. Our use of MDM is very limited we just want the ability to enable single app mode and power cycle devices.
I poured over the Settings and I can’t find any restrictions settings that would disable users from deleting apps or moving them around.