Hi. Thank you for your question and reaching out. I’d be more than happy to help you with your query
According to this article https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-firewall/assign-security-group-filters-to-the-gpo
To make sure that your GPO is applied to the correct computers, use the Group Policy Management MMC snap-in to assign security group filters to the GPO.
To complete the procedures, you must be a member of the Domain Administrators group, or otherwise be delegated permissions to modify the relevant GPOs.
You can also check https://social.technet.microsoft.com/wiki/contents/articles/51876.group-policy-filtering-and-permission.aspx
If the reply was helpful, please don’t forget to upvote or accept as answer, thank you.