This script retrieves assignments and filters for various Intune configuration types including:
- Device Configuration Profiles
- Device Management Configuration Policies
- Compliance Policies
- Security Baselines
- Administrative Templates
- App Protection Policies
- Apps Assignments
- Windows Information Protection Policies
- Remediation Scripts
- Device Management Scripts
- Autopilot Profiles (v1)
Required Microsoft Graph API permissions:
- DeviceManagementConfiguration.Read.All
- DeviceManagementApps.Read.All
- DeviceManagementManagedDevices.Read.All
- DeviceManagementServiceConfig.Read.All
- DeviceManagementScripts.Read.All
- Group.Read.All
- Directory.Read.All
- Shows included and excluded groups for each assignment
- Displays filter information if configured
- Export results to CSV
- Filter by specific Azure AD group