Samsung Enterprise Firmware Over the Air (EFOTA) allows you to manage and restrict firmware updates on Samsung devices running Android 7.0 Nougat or later.
The Samsung EFOTA flow involves registering your EFOTA settings provided by your licensed reseller, enabling "Register Enterprise FOTA" in the Android restrictions profile, viewing and selecting applicable updates to push to devices.
Samsung EFOTA can only be configured at customer level Organization Group, so all devices registered under that Organization Group receive updates. Consider creating a separate Organization Group for testing before pushing to all devices.