Device Categories

Device categories help organize enrolled devices into logical groups. Categories are selected during enrollment or assigned by administrators after enrollment, enabling targeted policy and app deployment.

Overview

Device categories create a classification system for managed devices. Assigned categories place devices into corresponding Azure AD dynamic groups.

Creating Categories

1. Navigate to Enrollment then Device Categories
2. Select Create Category
3. Enter name and description
4. Save

Example Categories

Category Assignment

During Enrollment

If configured, users select a device category during enrollment in Company Portal.

Post-Enrollment

Administrators can assign or change categories from device details.

Dynamic Group Integration

Create Azure AD dynamic groups using device category rules:

• Rule syntax: device.deviceCategory -eq "CategoryName"
• Devices automatically join groups based on their category
• Use category-based groups for policy and app targeting

Policy Targeting

Use category-based groups to target:

• Compliance policies
• Configuration profiles
• App deployments
• Security baselines
• Update rings

Best Practices

• Define categories that align with business structure
• Keep the number manageable (5-15)
• Use consistent naming conventions
• Create corresponding dynamic groups
• Document purpose and policies per category

API Reference

• GET /api/devices/enrollment/categories — List categories
• POST /api/devices/enrollment/categories — Create category
• PUT /api/devices/:deviceId/category — Assign category
• DELETE /api/devices/enrollment/categories/:id — Delete category