Hello – I think you can do it via Script if the out of box policies are not available.
For script – There are some prerequisites
Devices are running macOS 10.12 or later. Devices are managed by Intune. Shell scripts begin with #! and must be in a valid location such as #!/bin/sh or #!/usr/bin/env zsh. Command-line interpreters for the applicable shells are installed.
Answer ( 1 )
Hello – I think you can do it via Script if the out of box policies are not available.
For script – There are some prerequisites
Devices are running macOS 10.12 or later.
Devices are managed by Intune.
Shell scripts begin with #! and must be in a valid location such as #!/bin/sh or #!/usr/bin/env zsh.
Command-line interpreters for the applicable shells are installed.
More details https://docs.microsoft.com/en-us/mem/intune/apps/macos-shell-scripts
Have you already tried this?