Additional Device Trust granularity
We would like to do an ownership check (domain or cert presence) for certain groups of users but not ALL users. We would like variability by user/group: e.g. users to touch tax documents must work on company-owned device, while most employees must have non-ownership checks (like disk encryption).
This is part of our roadmap and we aim to release later this year. The feature should allow not just different ownership settings but also different security settings per group.
Adminsara (Admin, Box) commented
We are interested in rolling out device trust, but specific users would be exempt from these security rules (such as certain executives). We want the ability to exempt users, similar to Device Pinning.