Run policy on devices that have specific TAG

Is it possible to create a policy that evaluates whether a device has a specific TAG and if so, runs the remediation & if not, exits.

For example:
We have a specific application that needs to get installed on 20 computers; however, those computers are in different groups that we set up on Automox by department. Instead of taking those computers out of those groups and put into another temporary group, is it possible that i tag those computers with the application name and then create a policy that evaluates based on that tag?