Install microsoft defender for endpoint mac

Greetings all, I am trying to deploy MS Defender ATP on Macs.

So fat this is what I come up with:

// move the pkg file to a temp directory
wait cp "{posix path of file "wdav.pkg" of folder "__Download" of client folder of current site}" "/private/tmp/wdav.pkg"

continue if{not (exists process whose (name of it as lowercase = "Microsoft Defender ATP.app" as lowercase))}

// run the installer
wait /bin/sh -c "/usr/sbin/installer -pkg /private/tmp/wdav.pkg
g -target /"

I need guidance on how to run the python configuration script.
( /usr/bin/python MicrosoftDefenderATPOnboardingMacOs.py )

Also, the software Extention requires full disk permission; any idea how to enable that post-install without promoting the user ?

Thank you