From what I can see, there are two options here - allowas-in / as-override.
If config is required on PE - choice is allowas-in
If config is required on CE - choice is as-override
On R5 I set allowas-in
On SW1 I set as-override
Did the job and met the task criteria.