Move device configuration profile from device to user?

Question

Actually I have assigned a device configuration policy for my edge settings to a device group. Now I would like to assign that policy to a user group instead to devices.
So my first idea is to add the user group assignment to the same policy and then to wait until more or less all users have received that policy too. After that I would remove the device assignment and everything is done.....hopefully.
I‘m not quite sure if it is a good idea to assign the same policy to a device and a user at the same time?
Eventually someone already did a scenario like that and can point me to problems that can come up?
Thank you in advance!

Answer 1

@PuDerBaer Thanks for posting in our Q&A.

For this issue, in general, you can first remove the device group and then add the user group.

But it is not sure that every device configuration profile will no longer apply to the device group. In our official article, for windows devices, when remove devices from a group that's assigned the profile, some CSPs remove the setting, and some CSPs keep the setting, also called tattooing. So, it is suggested to try to test specific settings to confirm if it is available.
https://learn.microsoft.com/en-us/mem/intune/configuration/device-profile-troubleshoot#what-happens-when-a-profile-is-deleted-or-no-longer-applicable

If there is anything unclear, feel free to let us know..

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

There is no negative impact to this.

See device vs user group section
https://learn.microsoft.com/en-us/mem/intune/configuration/device-profile-assign#user-groups-vs-device-groups