Intune + Apple Business Manager: allow automatic application updates on some devices

Hi Community,

I've been trying to find a solution but I can not seem to find it anywhere. If there is one - I have missed it.

I have one Apple VPP Token synchronized to one registered MDM-server in Apple Business Manager. 

I have set the Automatic app updates to No.

Up until recently it was set to Yes and now we have an application full of bugs, rendering some critical functions useless.

I have 5 devices assigned to a group (SuperUsers) in Intune that I would like to receive application updates automatically.

The other 45 devices assigned to group (Users) should not get the update unless I allow it.

How do I achieve this?

I've been trying to create a new Apple VPP Token but it requires a VPP token file.

To get a new VPP token I need to register a new MDM-server in Apple Business Manager, and to be able to do that I need to create a new Apple Enrollment program token (correct?). But it seems like in creating a new Enrollment program token, my current will be deleted?I do NOT want the current devices to stop functioning.

I can not seem to find the information I'm looking for. If it is well documented somewhere then I guess I don't understand the documentation.