I have done a lot of research and found it’s possible for some app by using app configuration policies for managed apps that also have an app protection policy applied.
https://video2.skills-academy.com/en-us/mem/intune/apps/app-configuration-policies-use-ios
Here is a sample with Outlook:
https://video2.skills-academy.com/en-us/exchange/clients-and-mobile-in-exchange-online/outlook-for-ios-and-android/outlook-for-ios-and-android-configuration-with-microsoft-intune
However, for Company Portal app, there seems to be no such information to configure the permission. Here is the supported token that can be used in XML when configuring the Company Portal app.