@Kenneth De Vos , We can deploy the VPP as Required which doesn't need company portal to install and assign it to device group to make it works Here is a link with more details for the reference:
https://learn.microsoft.com/en-gb/mem/intune/apps/vpp-apps-ios#assign-a-volume-purchased-app
Hope it can help.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.