Update the latest information that may be helpful, we worked this out with the new (preview) company owned - working profile enrollment.
First go in your endpoint under Apps -> Android -> click Add+ -> App Type "Android Enterprise system app" and create e. g. your native Samsung camera app, with the corresponding package name (com.sec.android.app.camera).
Then just assign this app to a group you created which includes the specific device. With an android enterprise system app you can only say "required". But if you do this it will automatically install the desired app.
This process should also work with a personal owned device with working profile