Device categories allow you to easily manage and group devices in Microsoft Intune. Create a category, such assales oraccounting, and Intune will automatically add all devices that fall within that category to the corresponding device group in Intune. To enable categories in your tenant, you must create a category in the Microsoft Intune admin center and set up dynamic Microsoft Entra security groups.

This article describes how to configure and edit device categories.

Requirements

Device categories are available for these platforms:

• Android
• iOS/iPadOS
• macOS
• Windows

To configure device categories, you must be anIntune Administrator.

Before you begin

Decide if it's necessary to show the device category selection prompt to end users when they visit the Company Portal app or website. If you don't want the prompt to be visible, block it in acustomization profile first, and then create your categories.

If Multi Admin Approval access policies are enabled for device actions, creating new categories, editing existing ones, and deleting device categories might require approval from a second administrator. To learn more, seeUse Access policies to require Multi Admin Approval.

Step 1: Create device category in Intune

1. Sign in to theMicrosoft Intune admin center.
2. Go toDevices.
3. ExpandManage devices, and then selectDevice categories.
4. ChooseCreate to add a new category.
5. Enter the name of the new category, such asHR and an optional description.
6. SelectNext.
7. Optionally, assign a scope tag, likeUS-NC IT Team orJohnGlenn_ITDepartment, to limit management of the category to specific IT groups. For more information about scope tags, seeUse RBAC and scope tags for distributed IT.
8. SelectNext.
9. SelectCreate. The new category is added to yourDevice categories list.

You'll use the device category name when you create Microsoft Entra security groups in the next step.

Step 2: Create Microsoft Entra security groups

To enable automatic grouping, you must create a dynamic group using attribute-based rules in Microsoft Entra ID. For instructions, seeUsing attributes to create advanced rules in the Microsoft Entra documentation. Create an advanced rule for your group using thedeviceCategory attribute and the category name you created in Step 1 of this article.

For example, to create a rule that automatically groups devices belonging in the HR category, use the following rule syntax:device.deviceCategory -eq "HR"

View categories of all devices

To view the device category assigned to each device, go toDevices >All devices.The category is listed in theDevice category column. To add the column to your table, selectColumns, and then chooseCategory >Apply.

When you delete a category, devices assigned to it appear asUnassigned.

Change the category of a device

If you edit a category, be sure to update any Microsoft Entra security groups that reference the category in their rules.

1. Go toDevices >All devices.
2. Select a device.
3. SelectProperties.
4. Change the category listed underDevice category.
5. SelectSave.

Best practices

Device categories are supported on devices running Android, iOS/iPadOS, macOS, and Windows. People with Windows devices must use the Company Portal website to select their category. The category prompt appears for all other platforms when the user signs in to the Company Portal app. Regardless of platform, any device user can sign in to portal.manage.microsoft.com at anytime and go toMy devices to select a category.

If an iOS/iPadOS or Android device is already enrolled before you configure categories, the user will receive a notification about the device the user owns on the Company Portal website. The notification informs them that they need to select a category the next time they're in the Company Portal app.