UEM distributes Lookout for Work to any user groups that have it as an assigned app (as documented in Assigning the App to User Groups). The device user must install the app, and then open it. On opening Lookout for Work, the app activates automatically and prompts for the required permissions (unless the user is on a managed Android device and UEM is configured to accept end user consent for Android Enterprise devices).

If the user declines permissions or closes the app, their device is still activated and secured in Lookout and in your MDM. Lookout cannot alert the user of issues without having device permissions, but it continues to report issues to the Lookout MES Console.