Intune grouping, targeting, and filtering: recommendations for best performance

Thanks Scott for the high level breakdown.

It really clarified many use case in the real world.

For example, when you mentioned the Edge app group, it resonates with me instantly. I am sure many of us have done the app group in the past, and still doing it.

So, for this certain scenario, if we are publishing a new app and will only be available to certain people, what's the best practice?

Currently, we will create a new AAD group that has the app assignment, and start adding users or groups to it. We won't create additional groups for the same app usually.

But if different users need to uninstall the app, then we have to create another AAD group to include them and add it under the Uninstall assignment. Simply move them out of the first AAD group won't uninstall the app for them, isn't it?

I can't think of any other ways of archiving this.

Please advise.

Thanks.