Is it possible to assign a specific Intune policy to a specific device?

We are a small business and have a mix of devices, where some support secure boot, and others do not.

Is it possible to assign an Intune compliance policy to a specific device?   For example,  Workstation-001 does not support Secure Boot, but Laptop-001 does, therefore, I'd like to assign a compliance policy just to Workstation-001 that says Secure Boot is not required, and assign another policy to Laptop-001 that says Secure Boot is required.

If this is not possible, are there any suggestions on how to accomplish what I'm trying to accomplish?   Force Secure Boot if the device supports it?

Thanks!

Spork Schivago