Get-IntuneAssignments

1.0.14

This script retrieves assignments and filters for various Intune configuration types including:
- Device Configuration Profiles
- Device Management Configuration Policies
- Compliance Policies
- Security Baselines
- Administrative Templates
- App Protection Policies
- Apps Assignments
- Windows Information Protection Policies
- Remediation Scripts
- Device Management
This script retrieves assignments and filters for various Intune configuration types including:
- Device Configuration Profiles
- Device Management Configuration Policies
- Compliance Policies
- Security Baselines
- Administrative Templates
- App Protection Policies
- Apps Assignments
- Windows Information Protection Policies
- Remediation Scripts
- Device Management Scripts
- Autopilot Profiles (v1)
- Device Enrollment Configurations
- Role Assignments
- Cloud PC Role Assignments
- Windows Update Policies:
 * Windows Quality Update Profiles
 * Windows Feature Update Profiles
 * Windows Update Rings
 * Windows Driver Update Profiles

Required Microsoft Graph API permissions:
- DeviceManagementConfiguration.Read.All
- DeviceManagementApps.Read.All
- DeviceManagementManagedDevices.Read.All
- DeviceManagementServiceConfig.Read.All
- Group.Read.All
- DeviceManagementRBAC.Read.All (for Intune Role Assignments)
- CloudPC.Read.All (for Cloud PC Role Assignments)

- Shows included and excluded groups for each assignment
- Displays filter information if configured
- Export results to CSV
- Filter by specific Azure AD group

Show more

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Script -Name Get-IntuneAssignments

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

(c) 2025. All rights reserved.

Package Details

Author(s)

  • Amir Joseph Sayes

Tags

Intune Configuration Management Microsoft Graph Azure

Functions

Get-IntuneAppProtectionAssignment Get-IntuneManagedDeviceAppAssignment Get-IntuneDeviceManagementSecurityBaselineAssignment Get-IntuneDeviceCompliancePolicyAssignment Get-IntuneDeviceConfigurationAssignment Get-IntuneDeviceManagementConfigurationPolicyAssignment Get-IntuneDeviceConfigurationAdministrativeTemplatesAssignment Get-IntuneRemediationScriptAssignment Get-IntuneWindowsUpdateAssignment Get-IntuneAutopilotProfileAssignment Get-IntuneDeviceManagementScriptAssignment Get-IntuneWindowsInformationProtectionPolicyAssignment Get-IntuneDeviceEnrollmentConfigurationAssignment Get-IntuneRoleAssignment Get-CloudPcRoleAssignment

Dependencies

This script has no dependencies.

Release Notes

v1.0.14 - November 2025:
- Fixed: Added missing DeviceManagementRBAC.Read.All permission for Intune Role Assignments
- Fixed: Removed unnecessary Directory.Read.All permission from documentation
- Improved: Cleaned up PSScriptInfo metadata following PowerShell best practices
v1.0.13 - November 2025:
- Fixed: Duplicate output when running script without parameters
- Fixed: SystemManagedIdentity authentication parameter validation error
v1.0.12 - November 2025:
- Added support for Intune Role Assignments
- Added support for Cloud PC Role Assignments
- Added CloudPC.Read.All permission to Graph scopes
- Added support for Device Enrollment Configurations
- Fixed Out-GridView compatibility - script now returns PowerShell objects instead of formatting objects
- Results can now be used with Out-GridView, Export-Csv, and other PowerShell cmdlets
v1.0.11 - 2025:
- Added support for Windows Update Policies (Quality Updates, Feature Updates, Update Rings, Driver Updates)
v1.0.10 - 2025:
- Added support for certificate-based authentication (thumbprint)
- Added support for client secret authentication
- Added support for managed identity authentication (user-assigned and system-assigned)
v1.0.9 - 2025:
- Fixed bug with group names containing spaces
- Added logic to handle multiple groups matching search criteria
v1.0.7 - 2025:
- Enhanced function capabilities
v1.0.1 - Initial Release:
- Get all Intune Configuration Profile assignments
- Support for Device Configuration, Compliance Policies, Security Baselines, Apps, and more

FileList

Version History

Version Downloads Last updated
1.0.14 (current version) 156 11/18/2025
1.0.13 91 11/17/2025
1.0.12 21 11/15/2025
1.0.10 101 9/27/2025
1.0.9 267 5/2/2025