fleet/it-and-security/lib/macos/declaration-profiles/Software Update settings.json

{
    "Type": "com.apple.configuration.softwareupdate.settings",
    "Identifier": "com.fleetdm.config.softwareupdate.settings",
    "Payload": {
        "AllowStandardUserOSUpdates": true,
        "AutomaticActions": {
            "Download": "AlwaysOn",
            "InstallOSUpdates": "Allowed",
            "InstallSecurityUpdate": "AlwaysOn"
        },
        "Notifications": false,
        "RapidSecurityResponse": {
            "Enabled": true
        }
    }
}