You can toggle the setting as desired to auto-push to all or after pushing that way to some you can still change it to on-demand knowing it will stay installed but then users have to go to the app catalog to download the app if desired. It saves a lot of bandwidth if pushing many apps to many devices to have most of them be on-demand. We experienced this our first year with all apps being as auto and many devices enrolling at once, the system can slow to a crawl pushing apps. Now we tell sites to only push 10 or less of the main apps they must have as auto push and the rest make on-demand.