Removable USB Drives using Intune Configuration Policy

Question

There is extensive documentation on restricting access to USB via Intune Configuration Profiles, my question relates to the assignment part.

Is the assignment part Device only or can you assign the policy via the User SSO?

Want to restrict access to USBs for ordinary Users but - allow access for Global Admin Users.

Is it doable?

Answer 1

Have you tried the new device control capabilities here? It says you can scope the settings to a specific user or device group.
https://techcommunity.microsoft.com/t5/intune-customer-success/new-device-control-capabilities-to-manage-removable-storage/ba-p/3664726