Disclosed are various examples generating and optimizing deployment configurations for devices enrolled with a management service. A computing environment can be employed to receive information pertaining to a desired configuration of enrolled devices during an ingestion process where at least one user interface is generated, where the information received includes a specification of a client application, a resource, and a policy for implementation on a plurality of client devices enrolled with a management service. The enrolled devices can have different operating system installed thereon. The computing environment can generate a deployment configuration using the information received during the ingestion process, where the deployment configuration is universal across the client devices independent of the different operating systems. The deployment configuration can be published for at least one user group that causes the client devices to automatically install the client application and the resource, and implement the policy.