We have a pnp device rule that blocks access to iphones (pnp device definition) etc that is assigned to a group of users. What is the easiest way to allow users access to this definition?
Just whitelist the device list which you want to allow user to access or create policy in which you exclude those devices.
Hope this Helps.
i only want certain users to have access though? do block rules take precedence over other rules ie if theyre in the group the rule is applied to will this always take priority?
Create a new device defination which should include all the devices that you want to allow. Create user assignment group which should include user to whom you want to access to those device. Create policy pnp policy enable the device defination that you have created, add the user assignment group which you want to allow and check mark exclude.Add rest of the group,check mark include option and block them.
Hope this helps.