In the SLEEP profile, I would like the device to be able to download and install app and OS updates from (in our case) Apple. Is this possible?
You can control that through the "Apple Services" and "Web accounts" categories. You will need to allow these categories through either your online account or the Zone Manager app. Go to Cyber Safety, then Controls. Select the appropriate age profile from the drop-down menu, and then the categories will be in that list. Simply click on the Sleep Time icon and that will unblock them.
Let me know if this doesnt work for you.