Diagnostics around scope tags and permissions to better figure out why share policies fail to allow use would make life a lot easier. Adding the ability to assign software as available to device groups rather than just user groups would also make Company Portal more flexible in some situations. We were able to target devices in CM and that's one of the few things obviously missing when transitioning.