Introduction: In Azure Active Directory (Azure AD), you can create dynamic membership rules to automatically update groups. To quote Microsoft "Dynamic group membership reduces the administrative overhead of adding and removing users".. Or devices. This blog is to detail the properties and syntax needed to create dynamic membership rules for AutoPilot devices and assign deployment and ESP profiles. https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-dynamic-membership I wanted to create a group of all AutoPilot registered devices that has a specific Group tag 'PAW'. The intention being to assign a specific AutoPilot deployment profile/ESP and a set of configuration but only to defined computers and not all AutoPilot registered devices. Group tags will be created for different departments so they receive specific policy, apps, config per department i.e. Finance, HR, IT services etc. Within my list of AutoPilot devices (see how to popul