# Assignments with filters
## What Is This Page?
The **Filter Assignments** page is about a specific Intune feature called **assignment filters**. If you are not yet familiar with filters, think of them as a precision layer on top of group assignments.
When you assign a policy to a group, that policy normally applies to every device in the group. With a filter, you can refine this: *"Only apply this policy to Windows devices where the OS version is 22H2 or higher"* or *"Exclude personal devices from this compliance policy."* The filter evaluates each device individually at the time of policy evaluation — based on device properties — so you can be precise without creating endless groups.
This page lets you explore all filters in your tenant and see exactly where each one is used.
***
## Why Would You Use This?
* You want to know which assignment filters exist in your tenant
* You need to verify that a specific filter is applied to the right policies
* You are troubleshooting why a policy applies (or does not apply) to certain devices, even though the group looks correct
* You are auditing filter usage as part of a security or compliance review
* You want to find and clean up unused or misconfigured filters
***
## How to Use This Page
### Option 1: Load All Assignments with Filter Info
1. Navigate to **Assistant > Assignments > Filter Assignments**
2. Click **Load Data**
3. All assignments are loaded, including which filter (if any) is attached to each
4. Use the table filters to narrow down to assignments using a specific filter
### Option 2: Search by a Specific Filter
1. Use the **Select a filter** search box at the top
2. Type the filter name or browse the list
3. Select a filter
4. The table automatically narrows to show only assignments using that filter
***
## Understanding the Filters List
The page shows all available filters in your tenant. Each filter entry shows:
| Field | What It Shows |
| ------------------- | -------------------------------------------------------------------------- |
| **Filter Name** | The display name of the filter |
| **Platform** | Which device platform the filter applies to (Windows, iOS, Android, macOS) |
| **Management Type** | Whether it applies to MDM-managed or app-managed (MAM) devices |
| **Rule** | The filter expression, e.g. `(device.osVersion -startsWith "10.0.19")` |
***
## Understanding the Assignments Table
| Column | What It Means |
| --------------- | --------------------------------------------------------- |
| **Resource** | The Intune policy, app, or profile using this filter |
| **Type** | Resource category (Compliance, Configuration, App, etc.) |
| **Assignment** | The targeting method (group name, All Devices, All Users) |
| **Target** | The group or built-in target |
| **Platform** | Device platform |
| **Filter** | The filter applied to this assignment |
| **Filter Type** | Include or Exclude (see below) |
| **Status** | Assigned or Not Assigned |
### Include vs Exclude Filters — What Is the Difference?
| Filter Type | Effect |
| ----------- | --------------------------------------------------------------------------------------------- |
| **Include** | The policy only applies to devices in the group **where the filter rule is TRUE** |
| **Exclude** | The policy applies to all devices in the group **except** those where the filter rule is TRUE |
An important point: a filter does not replace or change the group assignment. It only refines which devices within the already-targeted group are actually evaluated for that policy.
**Example:** A compliance policy is assigned to `SG-All-Employees` with an Include filter for `device.manufacturer -eq "Microsoft"`. Only Surface devices (Microsoft-manufactured) in that group will get the policy. All other devices in the group are skipped.
***
## Filtering the Table
| Filter | What It Does |
| ------------------- | ---------------------------------------------------------------------------- |
| **Assignment Type** | Show only specific targeting methods |
| **Resource Type** | Focus on a specific type of Intune resource |
| **Status** | Show only Assigned or Not Assigned resources |
| **Platform** | Focus on a specific device platform |
| **Filter Type** | Show only Include filters, only Exclude filters, or resources with no filter |
***
## Clicking on Groups
Group names in the results are clickable and open the **Group Details** dialog.
***
## Exporting the Data
Click **Export** to download visible rows as a CSV.
**Filename:** `filter-assignments.csv`
***
## Common Use Cases
**Which policies use the "Windows-CorporateDevices" filter?**\
Select that filter from the dropdown and review all assignments in the results.
**Are any policies using an Exclude filter on iOS?**\
Set Platform to `iOS`, Filter Type to `Exclude`.
**Which resources have no filter applied?**\
Set Filter Type to `No Filter` — these assignments apply to all devices in the targeted group without any device-level refinement.
**Audit all assignment filters in the tenant**\
Review the filter list — each entry shows the rule expression and platform scope.
***
## Related Pages
* [All Assignments](/intune-assistant/assignments/all-assignments.md)
* [Group Assignments](/intune-assistant/assignments/group-assignments.md)
* [App Assignments](/intune-assistant/assignments/app-assignments.md)
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://docs.intuneassistant.cloud/intune-assistant/assignments/assignments-with-filters.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.