In NCM we can:
* find devices with configuration different than defined Baseline
* run report comparing actual device's configuration against set of rules, for example security recommendations.
It would be great to name result of any of above as group of devices visible for configuration change -- to fix given bug in configuration of all affected devices at once (for example by script execution).