Block delete /Applicaitons & install specific /Applications

We have allowed this in our test environment for low flex users. Below is how we’ve accomplished allowing us to have user uninstall applications from /Applications folder. Bear in mind, this would allow for ANY application so if you security apps make sure they are protected from user deletion in other fashions.  Under File/Folder /Applications/*  Delete action match ‘Allow deletion from /Applications’. 

For allowing applications to install, are you saying you have different macOS versions that seem to behave differently?  Can you explain a bit more on that request.

What we see is your allowing it using authorize low flexibility. But we need to block users from using the delete to /applications folder.

however the customers are having different versions of Mac os and when we apply the policies they are behaving in differently.