Assignments with filters
What Is This Page?
The Filter Assignments page is about a specific Intune feature called assignment filters. If you are not yet familiar with filters, think of them as a precision layer on top of group assignments.
When you assign a policy to a group, that policy normally applies to every device in the group. With a filter, you can refine this: "Only apply this policy to Windows devices where the OS version is 22H2 or higher" or "Exclude personal devices from this compliance policy." The filter evaluates each device individually at the time of policy evaluation — based on device properties — so you can be precise without creating endless groups.
This page lets you explore all filters in your tenant and see exactly where each one is used.
Why Would You Use This?
You want to know which assignment filters exist in your tenant
You need to verify that a specific filter is applied to the right policies
You are troubleshooting why a policy applies (or does not apply) to certain devices, even though the group looks correct
You are auditing filter usage as part of a security or compliance review
You want to find and clean up unused or misconfigured filters
How to Use This Page
Option 1: Load All Assignments with Filter Info
Navigate to Assistant > Assignments > Filter Assignments
Click Load Data
All assignments are loaded, including which filter (if any) is attached to each
Use the table filters to narrow down to assignments using a specific filter
Option 2: Search by a Specific Filter
Use the Select a filter search box at the top
Type the filter name or browse the list
Select a filter
The table automatically narrows to show only assignments using that filter
Understanding the Filters List
The page shows all available filters in your tenant. Each filter entry shows:
Filter Name
The display name of the filter
Platform
Which device platform the filter applies to (Windows, iOS, Android, macOS)
Management Type
Whether it applies to MDM-managed or app-managed (MAM) devices
Rule
The filter expression, e.g. (device.osVersion -startsWith "10.0.19")
Understanding the Assignments Table
Resource
The Intune policy, app, or profile using this filter
Type
Resource category (Compliance, Configuration, App, etc.)
Assignment
The targeting method (group name, All Devices, All Users)
Target
The group or built-in target
Platform
Device platform
Filter
The filter applied to this assignment
Filter Type
Include or Exclude (see below)
Status
Assigned or Not Assigned
Include vs Exclude Filters — What Is the Difference?
Include
The policy only applies to devices in the group where the filter rule is TRUE
Exclude
The policy applies to all devices in the group except those where the filter rule is TRUE
An important point: a filter does not replace or change the group assignment. It only refines which devices within the already-targeted group are actually evaluated for that policy.
Example: A compliance policy is assigned to SG-All-Employees with an Include filter for device.manufacturer -eq "Microsoft". Only Surface devices (Microsoft-manufactured) in that group will get the policy. All other devices in the group are skipped.
Filtering the Table
Assignment Type
Show only specific targeting methods
Resource Type
Focus on a specific type of Intune resource
Status
Show only Assigned or Not Assigned resources
Platform
Focus on a specific device platform
Filter Type
Show only Include filters, only Exclude filters, or resources with no filter
Clicking on Groups
Group names in the results are clickable and open the Group Details dialog.
Exporting the Data
Click Export to download visible rows as a CSV.
Filename: filter-assignments.csv
Common Use Cases
Which policies use the "Windows-CorporateDevices" filter? Select that filter from the dropdown and review all assignments in the results.
Are any policies using an Exclude filter on iOS?
Set Platform to iOS, Filter Type to Exclude.
Which resources have no filter applied?
Set Filter Type to No Filter — these assignments apply to all devices in the targeted group without any device-level refinement.
Audit all assignment filters in the tenant Review the filter list — each entry shows the rule expression and platform scope.
Related Pages
Last updated