Endpoint Services, Microsoft Intune, Adding Groups to Unit Scope
Information on adding groups to Intune unit scope.
Systems
Microsoft Intune
Intended Audience
University of Illinois IT Pros leveraging Intune, managed by Technology Services' Endpoint Services team
Affected Customers
University of Illinois IT Pros leveraging Intune, managed by the Technology Services' Endpoint Services team
Adding Groups to Unit Scope
- Due to a lack of constraints around group membership, Intune-managed groups must be owned by EPS and their memberships vetted before they can be added to a unit’s scope
- EPS will work with the requesting unit to craft a dynamic rule, however, due to limitations of the rule builder we may not be able to accommodate your needs
- Groups must be dynamic device groups: Manage Rules for Dynamic Membership Groups in Microsoft Entra ID | Azure Docs
- Most IT Pros will not have permissions to create dynamic groups, but we recommend familiarizing yourself with their rules and limitations from the above article before forming your request.
- The dynamic rule will be further constrained by the unit’s prefix, as either the Autopilot Tag or enrollment profile name.
- Be aware of group processing times and the impact of complex rules: Understand and Manage Dynamic Group Processing in Microsoft Entra ID | Azure Docs
- Request groups via https://go.illinois.edu/IntuneHelp