Targeting Groups and Users
Control which users and devices receive each campaign using groups, departments, and device filters.
Last updated: February 22, 2026
Ambient lets you target campaigns to specific audiences rather than broadcasting to everyone. Precise targeting reduces irrelevant noise and lets you personalise communications by team, region, or role.
Targeting Options
| Option | Description |
|---|---|
| All Users | All enrolled users in the tenant |
| All Devices | All enrolled endpoint devices |
| Groups | One or more user groups (manual or directory-synced) |
| Departments | Users matching a department field from your directory |
Targeting by Group
Groups are the most flexible targeting method:
- In the campaign form, disable Target All Users.
- Use the group search box to find and add groups.
- Multiple groups can be selected — the campaign targets the union of all selected groups.
Groups can be created manually or synced from Azure AD, Okta, or Google Workspace. See Adding Team Members for group management.
Targeting by Device vs. by User
- User-targeted campaigns (wallpapers, signatures) follow the user — if they log in on a different device, they still receive the content.
- Device-targeted campaigns (lock screens, screensavers, device policies) apply to the specific machine regardless of who is logged in.
Combining Targets
To target a specific set of devices within a group:
- Use Groups targeting to filter by user group.
- Additionally filter by department or device tag (available on Enterprise plans).
Testing Before Broad Deploy
Best practice: create a Test Group containing your own device and a few QA machines. Target this group first to validate content before rolling out to the full organisation.
Exclusions (Enterprise)
Enterprise plans support exclusion rules — target All Users but exclude a specific group (e.g., exclude C-suite from general wallpaper campaigns). Configure exclusions in Campaigns → Advanced Targeting.
Targeting and Permissions
- Content Manager role: can target any existing group.
- Admin role: can create new groups and configure directory sync.
- Targeting rules are enforced server-side — a user in a targeted group cannot opt out at the device level.