Automatic Profiles for newly enrolled devices only

[ShannonSnyder]

We're in the process of transitioning email profiles (Legacy > Derived/CBA).  Ideally, this would be done through attrition of the mobile devices meaning only the newly enrolled devices would get these new profiles/apps.  I wanted to make sure I'm not missing some assignment group or profile setting that would let the current profiles remain but only apply the updated profile to newly enrolled devices.  I see that there is an assignment group criteria that would allow Apple - DEP/Supervised vs other but nothing around enrollment dates.

Any help is appreciated,

Shannon

[AaronWhittaker]

As with a lot of things, it seems as though APIs are your friend. There is an API that will pull out the enrollment date of a device, you can use that to get all the devices that have enrolled in say the last 24 hours and add a tag to those to get the new profile. If you wanted it to run more frequently, you could set up a scheduled task to run every 15 minutes and tag the devices then. We do something similar with application tagging for new devices.