That is something you can configure in the settings for the mobile app. To ask for the master password every time is default behavior, but it can also be set to a PIN or biometric instead.

How big is your install base at work? Still wondering how to replace something like Active Directory, Group Policies and the like for centralized management akin to Windows based networks.