Global Subtab

The Visibility > Global subtab lists visibility conditions.

On the Global tab, you can create conditions based on Active Directory Group and OU/Administrative Unit, AD Property (Active Directory properties), and Collections/Intune Groups.

Important:The creation of a condition based upon Active Directory device groups is not supported.

After you use the Add Condition Dialog Box to add a condition to any of the three subtabs (Group and OU/Administrative Unit, AD Property, or Collections/Intune Groups), that condition is listed on the Visibility tab.

You can add AD and Entra ID users/groups, as well as Organizational Units (OUs) or Administrative Units (AUs), simultaneously. Catalog items are displayed to users based on AD or Entra ID attributes evaluated through configured visibility conditions.

After the condition is added, specify the Enforcement option you want to take effect: Include or Exclude.

You can view the identity type that the user/group belongs to.

Important:In Group and OU/Administrative Unit tab, only manually created Intune Groups are available to add.

In Collections/Intune Groups tab, only the auto created Intune Groups are available to add.

If Microsoft Entra ID is selected as IAM, adding Intune Groups with Users as member is not supported.