Microsoft Surface Hub 2 SmCamera - Manual (Page 77)

6. Under Data type, select String XML and browse to open the XML file you created
in the previous step.
7. Click Save .
8. Click Select groups to include and choose the security group you created earlier
( Surface Hub devices ). Click Next.
9. Under Applicability rules, add a Rule if desired. Otherwise, select Next and then
select Create .
To learn more about custom configuration profiles using OMA-URI strings, see Use
custom settings for Windows 10 devices in Intune .
Members of the newly configured Surface Hub Local Admins Security group can now
sign in to the Settings app on Surface Hub and manage settings.
Non Global admins managing Surface Hub
） Important
Unless the Update ("U") action of the LocalUsersAndGroups CSP is the only
configuration used, the pre-existing access of global admins to the Settings app is
removed.