Default "all devices" and "all users" groups.
It would be great if there was a default group called "All devices" that new agents automatically flow into. Same with a default for "all users". This ensures that new deployments can automatically fall into a group, and thus automatically get whatever policies are associated.
Or, have groups be built automatically with some filters (IF AND OR).