Assignment filters

Assignment filters

Assignment filters within Nerdio Manager allow you to fine-tune the assignment of policies and applications to customer accounts by restricting them to certain device or application types. Filters are created at the MSP level, and you can then assign them to policies or applications either by direct assignment at the MSP level or by assigning them first to customer tenants and then using them for configuration at the Account level.

Note:

Assignment filters are supported for the following assignment types:

  • Native Intune applications (applications from the Windows (Intune) repo only)

  • The following policy and profile types:

    • Security baselines

    • Configuration profiles

    • Update rings

    • Enrollment Status pages

    • Endpoint security policies

    • Conditional Access policies

    • Defender for Office365 policies.

See the Microsoft Learn article List of platforms, policies, and app types supported by filters in Microsoft Intune for details.

Work with assignment filters in Nerdio Manager

The Assignment Filters page in Nerdio Manager (Policy Management > Assignment Filters) provides a single-screen summary of your assignment filters, including the platform they apply to, the customer accounts they're assigned to, and the policies that currently use them.

  • The Assignment Filters Tasks tab displays a summary of recent actions taken on filters (including assignment and publishing) and their success/error status, and allows you to view a detailed log of each action.

  • The buttons at the top of the screen allow you to customize the view and locate specific filters:

    • Select Search to enter a text string and narrow the list of filters to those that match the entered string.

    • Select Columns to show/hide columns in the table.

    • Select Filter to display only filters that match certain criteria (including management type and platform type).

  • The Name column displays the name and (if applicable) description of the filter.

  • The Platform column displays the OS subtype on which the filter operates.

  • The Management Type column indicates whether the filter works according to device type or deployed applications.

  • The Assignments column shows the customer account(s) to which the filter is assigned.

  • The Resources column shows which policies and/or applications are currently using the filter.

  • The Actions column allows you to edit, delete, or assign a filter, or to view its operational status against any assigned policies or applications.

Create, manage, and assign filters

To simplify the process of assigning policies and applications to customer accounts, Nerdio Manager provides an intuitive interface to configure and manage assignment filters.

To create a new filter or edit an existing filter:

  1. At the MSP level, navigate to Policy Management > Assignment Filters.

  2. Choose from the following:

    • To create a new filter, select Add Assignment Filter.

    • To edit an existing filter, locate it in the list and select the pencil icon in the corresponding row to open the filter in the editor.

      Note: If you have a long list of filters, you can narrow your search by using the Search or Filter functions located at the top of the page.

  3. Enter the following information:

    • Filter Type: Determine the type of criteria the filter will identify the devices to include/exclude. Choose from:

      • Apps: Use the filter to include or exclude devices running certain applications.

      • Devices: Use the filter to include or exclude groups of devices that meet a particular set of criteria (for example, all devices from a certain manufacturer).

    • Filter Name: Enter a name that will allow you to easily search for the filter and identify it in lists.

    • Description: Optionally, enter a brief summary of the filter's function and uses.

    • Platform: From the dropdown, select the OS subtype on which the filter will operate.

    • Rules: Use the dropdowns and/or the syntax editor to create one or more rules to define the scope of the filter.

      Notes:

  4. Click Save to create or amend your filter.

To assign a filter to a customer account, or to edit a filter assignment:

  1. At the MSP level, navigate to Policy Management > Assignment Filters.

  2. Locate the filter you want to assign, or whose assignments you want to update. In the corresponding menu select the three vertical dots to open the action menu, then select Assign.

  3. In the Update Assignments window, select one or more customer accounts from the Assignments dropdown menu to add the account(s) to the assignment filter, or remove accounts from the Assignments field by clicking the X next to the customer's name.

    Note: Pending changes to filter assignments appear under the Preview Changes and Preview Apps headings. Verify that you are happy with these changes before proceeding.

  4. Select Save to commit your changes and modify the filter assignment.

    Once the filter has been assigned to a customer account, you can use it to modify policy assignments at the Account level.

To use assignment filters in direct policy assignment:

See Directly assign policies to customer devices, users, and group templates at the MSP level in the Intune policy: MSP level general management KB article.

To use assignment filters in direct application assignment:

See Directly assign Windows applications to customer devices, users, and group templates at the MSP level in the Unified application management: Manage applications KB article.

Was this article helpful?

0 out of 0 found this helpful
Have more questions? Submit a request

Comments (0 comments)

Please sign in to leave a comment.