Get-IntuneAssignments
1.0.15
- Device Configuration Profiles
- Device Management Configuration Policies
- Compliance Policies
- Security Baselines
- Administrative Templates
- App Protection Policies
- Apps Assignments
- Windows Information Protection Policies
- Remediation Scripts
- Device Management
- Device Configuration Profiles
- Device Management Configuration Policies
- Compliance Policies
- Security Baselines
- Administrative Templates
- App Protection Policies
- Apps Assignments
- Windows Information Protection Policies
- Remediation Scripts
- Device Management Scripts
- Autopilot Profiles (v1)
- Device Enrollment Configurations
- Role Assignments
- Cloud PC Role Assignments
- Windows Update Policies:
* Windows Quality Update Profiles
* Windows Feature Update Profiles
* Windows Update Rings
* Windows Driver Update Profiles
- Terms and Conditions
- Compliance Policies (new Settings Catalog-based)
- Cloud PC Provisioning Policies
- WDAC Supplemental Policies
- macOS Shell Scripts
- macOS Custom Attribute Shell Scripts
- Intune Branding Profiles
Required Microsoft Graph API permissions:
- DeviceManagementConfiguration.Read.All
- DeviceManagementApps.Read.All
- DeviceManagementManagedDevices.Read.All
- DeviceManagementServiceConfig.Read.All
- Group.Read.All
- DeviceManagementRBAC.Read.All (for Intune Role Assignments)
- CloudPC.Read.All (for Cloud PC Role Assignments and Cloud PC Provisioning Policies)
- DeviceManagementServiceConfig.Read.All (for Terms and Conditions)
- DeviceManagementScripts.Read.All (for macOS Shell Scripts and Custom Attribute Scripts)
- Shows included and excluded groups for each assignment
- Displays filter information if configured
- Export results to CSV
- Filter by specific Azure AD group
Installation Options
Owners
Copyright
(c) 2025. All rights reserved.
Package Details
Author(s)
- Amir Joseph Sayes
Tags
Intune Configuration Management Microsoft Graph Azure
Functions
Get-GroupDisplayNameSafe Get-IntuneAppProtectionAssignment Get-IntuneManagedDeviceAppAssignment Get-IntuneDeviceManagementSecurityBaselineAssignment Get-IntuneDeviceCompliancePolicyAssignment Get-IntuneDeviceConfigurationAssignment Get-IntuneDeviceManagementConfigurationPolicyAssignment Get-IntuneDeviceConfigurationAdministrativeTemplatesAssignment Get-IntuneRemediationScriptAssignment Get-IntuneWindowsUpdateAssignment Get-IntuneAutopilotProfileAssignment Get-IntuneDeviceManagementScriptAssignment Get-IntuneWindowsInformationProtectionPolicyAssignment Get-IntuneDeviceEnrollmentConfigurationAssignment Get-IntuneRoleAssignment Get-CloudPcRoleAssignment Get-IntuneTermsAndConditionsAssignment Get-IntuneNewCompliancePolicyAssignment Get-IntuneCloudPcProvisioningPolicyAssignment Get-IntuneWdacSupplementalPolicyAssignment Get-IntuneMacOsShellScriptAssignment Get-IntuneMacOsCustomAttributeScriptAssignment Get-IntuneBrandingProfileAssignment
Dependencies
This script has no dependencies.
Release Notes
v1.0.15 - May 2026:
- Added support for Terms and Conditions assignments
- Added support for new-style Compliance Policies (Settings Catalog-based)
- Added support for Cloud PC Provisioning Policy assignments
- Added support for WDAC Supplemental Policy assignments
- Added support for macOS Shell Script assignments
- Added support for macOS Custom Attribute Shell Script assignments
- Added support for Intune Branding Profile assignments
v1.0.14 - November 2025:
- Fixed: Added missing DeviceManagementRBAC.Read.All permission for Intune Role Assignments
- Fixed: Removed unnecessary Directory.Read.All permission from documentation
- Improved: Cleaned up PSScriptInfo metadata following PowerShell best practices
v1.0.13 - November 2025:
- Fixed: Duplicate output when running script without parameters
- Fixed: SystemManagedIdentity authentication parameter validation error
v1.0.12 - November 2025:
- Added support for Intune Role Assignments
- Added support for Cloud PC Role Assignments
- Added CloudPC.Read.All permission to Graph scopes
- Added support for Device Enrollment Configurations
- Fixed Out-GridView compatibility - script now returns PowerShell objects instead of formatting objects
- Results can now be used with Out-GridView, Export-Csv, and other PowerShell cmdlets
v1.0.11 - 2025:
- Added support for Windows Update Policies (Quality Updates, Feature Updates, Update Rings, Driver Updates)
v1.0.10 - 2025:
- Added support for certificate-based authentication (thumbprint)
- Added support for client secret authentication
- Added support for managed identity authentication (user-assigned and system-assigned)
v1.0.9 - 2025:
- Fixed bug with group names containing spaces
- Added logic to handle multiple groups matching search criteria
v1.0.7 - 2025:
- Enhanced function capabilities
v1.0.1 - Initial Release:
- Get all Intune Configuration Profile assignments
- Support for Device Configuration, Compliance Policies, Security Baselines, Apps, and more
FileList
- Get-IntuneAssignments.nuspec
- Get-IntuneAssignments.ps1