Intune AutoPilot user group based on new autopilot device

@Sanjeev Kumar, Thanks for posting in Q&A. Based on checking the rule property, I find there's no attribute to create user group who initiate an Autopilot enrollment.

https://learn.microsoft.com/en-us/entra/identity/users/groups-dynamic-membership

Agree with Rahul Jindal [MVP], you can use Intune filter to do it. You can create a filter with enrollmentProfileName set as the Autopilot enrollment profile. When deploy office to user group add this filter to only apply to these devices.

https://learn.microsoft.com/en-us/mem/intune/fundamentals/filters-device-properties

Hope the above information can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

I would start by addressing the failures during the Autopilot provisioning process first. Skipping ESP is not the solution for failures. As for the question around office assignment is concerned, you cannot create a group the way you want dynamically using native functionality in Entra. Although I don’t really understand the approach here. If you want office to install after a user logs in then just assign to a user based group. If you are concerned about devices other than autopilot provisioned receiving the policy then just use a device filter and scope the to autopilot enrolled profile assigned devices.