In Google Play you should have the option to change your Approval Preference on the apps. I would suggest you change it to Keep approved when app requests new permissions for your apps. You can also add a email address to be notified whenever the apps request new permissions.
If you are unable to reapprove the app directly, you can unapprove the app in Play for Work and Reapply it again BEFORE you click the sync button to sync your approvals back to Intune.