Intune Assignments Manager¶
An enterprise tool for bulk-managing Microsoft Intune mobile app and configuration profile assignments. Browse your tenant's apps and policies, assign them to Azure AD groups in bulk, and audit every change -- all from a single browser-based interface.
The app runs entirely client-side. Your credentials and data never leave your browser except to communicate directly with the Microsoft Graph API. Deploy it to Cloudflare Pages or run it locally.
Features¶
-
Getting Started
Prerequisites, Azure app registration, and first login walkthrough.
-
Authentication
How sign-in works, token management, and security model.
-
Permissions
Four permission tiers, what each scope enables, and how to grant them.
-
Dashboard
Tenant overview with stats, recent activity, and quick actions.
-
Apps
Browse, filter, and search your Intune mobile applications.
-
Configuration Profiles
Browse, filter, and search Settings Catalog configuration policies.
-
Bulk Assignment
Five-step wizard for assigning apps and profiles to groups at scale.
-
CSV Import / Export
Export assignments to CSV and import them back for repeatable workflows.
-
Audit Log
Review Intune assignment changes with date range and activity filters.
-
Deployment Status
Monitor app install failures and profile deployment errors.
What it does¶
Intune Assignments Manager connects to your Microsoft 365 tenant via the Microsoft Graph API and provides:
- Unified browsing of all mobile apps and Settings Catalog configuration profiles in your Intune tenant
- Bulk assignment of multiple apps and profiles to multiple Azure AD groups in a single operation
- Conflict detection when the same group is targeted with different assignment settings
- Safe merging of new assignments with existing ones (the Graph API replaces all assignments on each POST, so the app always fetches current state first)
- CSV workflows for exporting current assignments and importing new ones
- Audit visibility into recent assignment-related changes in your tenant
- Deployment monitoring for app install and profile deployment failures
All operations use the Microsoft Graph beta endpoint and require appropriate Intune administrator permissions.