When creating maintenance schedules, the option to exclude some devices based on a tag or another Azure Group (if Target Type was an Azure Group).
We frequently want to schedule a maintenance for “all active employees” but then some users might need to be excluded. This means we either have to make a static Azure Group, or create a custom filter script - which is a bit of a bother.
Being able to exclude certain devices when there are “exceptions” would be preferable over having to create and maintain group memberships.