Locking Intune Device Categories by Azure groups

NeilPD 

Hi,

Device categories are for devices, but not for the users, but admins can give the option to users to select the device category when enrolling the device.

Is there a way to assign an azure group to a device category

Yes. You can create device categories 1st and then using Dynamic AAD Groups (Dynamic Device), create a rule to assign devices with the specific category to the group.

Check this - https://docs.microsoft.com/en-us/mem/intune/enrollment/device-group-mapping

This will work - Or so users can only see the device categories that they have been given access to by the azure group(s)?

This can be achieved if you install Company Portal app. When they 1st open the app, they will be asked to select the Device Category. However in this case they can see all the device categories and have to select the proper one.

Once selected, the device will be assigned to the previously created AAD Dynamic device group so you can set targeted policies for that category.
Check this - https://jannikreinhard.com/2021/07/18/configure-device-categories/

Hope this helps.

Thanks you.

**If you think my answer is valid, please Accept it as the solution. Thank you**