AMA: Your guide to adopting Microsoft Intune

What is the best practices way to handle security groups (either user or computers) to order and assign them to applications and policies? Currently we are creating dynamic groups based on job title to automatically assign a user to that group, and then assigning those groups to applications or the policies that are associated for those groups to have. Would this be recommended, or would you suggest another way to create groups and associate them to applications and policies?