Scope Profile - Device Group Creation - Help please

It's been years but I HAVE A SOLUTION!

Device Groups are NOT just an Entra Security Group with Devices in it. Device Groups are found in MS Defender portal, Settings > Endpoints > Permissions > Device Groups

From there you can make a device with conditionals that add devices, or assign that Entra Security group full of devices that wouldnt show up in the next step, and it will populate this device group. Save and close the group, check the top of the screen for the notification to reload and recalculate the groups, and Then you can go to the Scoped Devices, find your group in the setup, and then assign the Scoped device policy at the exemption for whichever Cloud App you've shut your employees out of.

https://learn.microsoft.com/en-us/defender-endpoint/machine-groups?view=o365-worldwide



PS: I'm looking for work outside of computers and away from anything Microsoft has touched if anyone is hiring