# Manage Dynamic Assignments

*Applies to: Patch My PC Publisher*\
*Available at level: All Custom Products, All Products*\
*Available on tab: Intune Updates*

## Overview

Manage Dynamic Assignments allows you to automatically create Intune assignments for newly published updates based on predefined catalog criteria.

<figure><img src="https://3773699522-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MX7dvS0r_4fc0AikgJS%2Fuploads%2Fvq4CY2ZoVucZIkBmldro%2Fimage.png?alt=media&#x26;token=362fd891-590a-4d49-8131-30d28fc9c256" alt="Manage Dynamic Assignments" width="563"><figcaption></figcaption></figure>

Instead of assigning every update to the same Entra groups, Dynamic Assignments evaluates each update during a Publisher [synchronization](https://docs.patchmypc.com/patch-my-pc-publisher/administration/sync-schedule) and applies assignments only when the update matches your configured rules. This enables targeted deployment based on update attributes rather than static grouping.

{% hint style="info" %}
**Note**

Dynamic Assignments are conceptually similar to Automatic Deployment Rules in ConfigMgr, but they apply to Intune Updates managed by the Publisher.
{% endhint %}

## How Dynamic Assignments Work

During each sync, the Publisher evaluates newly published Intune Updates against your configured criteria. Criteria can include attributes such as the presence of a CVE, CVE severity, keywords in the update title, or the update classification.

If an update meets the defined conditions, the Publisher automatically creates assignments for the Entra groups you specify. If an update does not meet the criteria, no assignment is created.

This approach allows different updates to follow different deployment paths based on risk, urgency, or relevance, without requiring manual assignment for each update.

{% hint style="warning" %}
**Important**

Intune only allows a single assignment per app per group. If the same group is targeted by both a static assignment, through the [Manage Assignments right-click option](https://docs.patchmypc.com/patch-my-pc-publisher/customizations-right-click-options/manage-assignments), and a dynamic assignment, the dynamic assignment will take precedence.
{% endhint %}

## Evaluation Criteria

Dynamic Assignments evaluate newly published updates using one or more of the following criteria.

* **Has CVE**\
  A Boolean value that evaluates whether the update has one or more CVE IDs associated with it.
* **Severity**\
  A multi select list that includes Critical, Important, Moderate, and Low.\
  **Title**\
  Plain text or regular expression strings used to match update titles. Exclusions can be defined by prefixing a value with a minus sign.
* **Update Classification**\
  A multi select list that includes Updates, Critical Updates, and Security Updates.

{% hint style="info" %}
**Note**

Criteria options that allow multiple values use an **OR** operator. All different criteria types are joined together using an AND operator.

In practical terms, this means an update must meet all selected criteria types, but only one value within each type.
{% endhint %}

{% hint style="warning" %}
**Important**

Dynamic Assignments are evaluated **only for products that are currently enabled** in the Publisher  product tree and **only for the current version of a product** at the time it is published.

When Dynamic Assignments are used together with [**auto publishing rules**](https://docs.patchmypc.com/administration/intune-apps-updates/form-controls/scan-intune-for-supported-products#auto-publishing-rules), there is an important timing consideration. During the first Publisher synchronization, autopublishing rules enable the product and publish the update. Because the product was not enabled at the start of the sync, Dynamic Assignment evaluation does not occur at that time.

A **second Publisher synchronization** is required for Dynamic Assignments to evaluate the newly enabled product and determine whether the update meets the configured criteria for assignment.

This behavior is expected and should be accounted for when designing automation workflows that combine autopublishing rules with Dynamic Assignments.
{% endhint %}

## Configure Dynamic Assignments

To configure Dynamic Assignments, follow the steps below.

1. Open the Intune Updates tab in the Publisher.
2. Right click All Products or All Custom Products and select Manage Dynamic Assignments.
3. Select **Add** to create a new Dynamic Assignment rule.

<figure><img src="https://3773699522-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MX7dvS0r_4fc0AikgJS%2Fuploads%2F7A8ccpkVBv9yXi3v2jB7%2Fimage.png?alt=media&#x26;token=aa4b2ab8-85db-4908-89e1-c1c626bd7c5c" alt="New Dynamic Assignment Rule" width="563"><figcaption></figcaption></figure>

4. Enter a Name and optional Description for the rule.
5. Select one or more Property Filters to define the evaluation criteria.
6. Configure the search criteria values for each selected filter.

<figure><img src="https://3773699522-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MX7dvS0r_4fc0AikgJS%2Fuploads%2FDe8ncGVtaRPKqn4lQL8B%2Fimage.png?alt=media&#x26;token=c76d0f0e-c8f1-4633-b39f-4f4f6eb49115" alt="New Dynamic Assignment Rule Settings" width="450"><figcaption></figcaption></figure>

7. Click **Preview** to see which updates currently match the rule.

<figure><img src="https://3773699522-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MX7dvS0r_4fc0AikgJS%2Fuploads%2FmvPV1Ro1E0WlRG9Qqjcf%2Fimage.png?alt=media&#x26;token=808b3e20-147a-4582-9292-a3c1a506d37c" alt="Preview Updates" width="525"><figcaption></figcaption></figure>

8. Click **Manage** to configure assignments for the rule.
9. Add the required Intune assignments using the standard Manage Assignments window.

<figure><img src="https://3773699522-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MX7dvS0r_4fc0AikgJS%2Fuploads%2FlDQ6W845WJVtQ00UNrg1%2Fimage.png?alt=media&#x26;token=57eb042c-fdec-4988-b23c-0c99829b678e" alt="Manage Assignments" width="450"><figcaption></figcaption></figure>

10. Click **OK** to save the rule.

<figure><img src="https://3773699522-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MX7dvS0r_4fc0AikgJS%2Fuploads%2FA3ndSwlzAgjglPftpnsW%2Fimage.png?alt=media&#x26;token=9bc158bf-bc3f-44e2-9a98-116358a829ff" alt="Rule Configuration Complete" width="563"><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.patchmypc.com/patch-my-pc-publisher/customizations-right-click-options/manage-dynamic-assignments.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
