Device configuration only for users?

[Harry Dubois]

We are just beginning with Intune, but is it just right that you cannot ad devices in a Azure AD Group, and use a device configuration policy only for that group with devices? Or is this because you can only assign devices with associated users?

[#2]

That is correct, AAD Groups contain user accounts, they don't contain devices. 

Devices are managed by Registering them and then applying policies, see

https://docs.microsoft.com/en-us/azure/active-directory/device-management-introduction

[#3]

If you can map the membership rules to your use case, you may be able to use Device Dynamic Groups:

https://docs.microsoft.com/en-us/azure/active-directory/active-directory-groups-dynamic-membership-a...

We're successfully assigning configurations based upon this approach today.  It takes a few minutes for the dynamic group membership to get resolved after enrolling the device in Intune, but they do eventually apply.