We have a specific corporate Samsung Knox "build". Effectively we have a app allow\block configuration policy. The build consists of a mixture of apps (apks) on the Google Play store and .apks provided by vendors.
In order to achieve the auto deployment of all the required apps upon enrolment we have to publish the app store app as a LOB required app. EG, Outlook app. This is so we can bypass the requirement to setup a play store account.

The outlook app is able to update automatically from the play store based on the device/playstore settings. The problem we are facing is if the app has been updated through the play store, and when changes are made to device configuration policy which targets the device\app. The uploaded (older) version of Outlook is pushed down to the device.
We need Intune to be able to detect the app and if a newer version is already installed then to skip.