Forum Discussion
Assign Configuration Profile Only for Affinity User, or what can we use the primary user for?
Hi Nayuta,
there is no user affinity for configuration profiles in Intune. The primary user is used during app targeting, for example a secondary user can't install apps on devices where he is not primary user, see some details for app targeting here:
Intune application targeting for Windows 10 Win32 apps explained
Currently the primary user can't be changed, but this is announced to be in-development, check here:
https://docs.microsoft.com/en-us/intune/fundamentals/in-development
So to summarize I would suggest to study this article as it describes the current behavior:
Assign user and device profiles in Microsoft Intune
https://docs.microsoft.com/en-us/intune/configuration/device-profile-assign
especially see section: User groups vs. device groups
In addition to user and device targeting you can use applicability rules which currently support only OS Version and OS Edition, see here:
https://docs.microsoft.com/en-us/intune/configuration/device-profile-create#applicability-rules
best,
Oliver
Thank you for your answer.
Intune also supports changing the primary user now.
I also try to use "UserPrincipalName" in the common name of the scep profile. I'll report when I finished.
Thanks!
nayuta