A device filter is always executed on a specific customer. The base set of devices to which the filter is applied consists of all devices that are currently registered at a location of that customer.
To actually execute a device filter on a specific customer, the executing user must have the VIEW_DEVICES customer permission on that customer.
