There is no built-in method to change a file permission. LANDesk will get you 90% of the way there by being your framework to make the change - but it will require you to either user a script package or manage scripts to get the last 10%.
echo Y | C:\Windows\System32\CACLS.exe "%ProgramFiles%\Application Folder\Application.exe" /R "users" /E /T
*Note: Change the group name as needed.
Your primary two options:
Add that as a batch file and create a distribution package for it - which you can deploy as a policy or push.
Add that as a manage script - which you can deploy as a scheduled push or push.
An advanced method for Desired State Configuration would be to setup a custom definition in LANDesk that checked the folder/file permissions then set your desired permissions if they are not already there. This way it keeps them in compliance.
Hope this helps to clarify your question,
FYI, I'd use ICACLS instead of CACLS
Any reason why?
ICACLS "replaced" CACLS and is a bit easier to use if you're not familiar with either of them.