https://configmgrblog.com/2018/02/21/device-type-and-limit-enrollment-restrictions-can-now-be-assigned-to-groups/