https://endpointcave.com/create-a-dynamic-device-group-for-all-dem-user-enrolled-devices/