Hey Leo,
It adds device status into the equation for network access, if a device is non complaint or compromised, that data can be used by ISE to block access.
you can also do IP range based enrollment to split your devices into groups or use Tags and Workspace ONE Intelligence to tag and add to smart groups according to IP Range etc.
I hope that answers your question