I think this would need to a new feature in iOS. All that I can see (e.g. iOS Network Usage Rules) applies to the whole app and running/updating cannot be separate.   You could maybe use the Meraki Do Not Disturb (DnD) feature to force a certain profile on to the device at a specific time, then only carry out app updates during that window. It is a messy and far from ideal!   Thank you, Peter James ... View more