Intune Assignments Manager¶
An enterprise tool for bulk-managing Microsoft Intune mobile app and configuration profile assignments. Browse your tenant's apps and policies, assign them to Azure AD groups in bulk, and audit every change -- all from a single browser-based interface.
The app runs entirely client-side. Your credentials and data never leave your browser except to communicate directly with the Microsoft Graph API. Deploy it to Cloudflare Pages or run it locally.
Features¶
- Getting Started
Prerequisites, Azure app registration, and first login walkthrough.
- Authentication
How sign-in works, token management, and security model.
- Permissions
Four permission tiers, what each scope enables, and how to grant them.
- Dashboard
Tenant overview with stats, recent activity, and quick actions.
- Apps
Browse, filter, and search your Intune mobile applications.
- Configuration Profiles
Browse, filter, and search Settings Catalog configuration policies.
- Bulk Assignment
Five-step wizard for assigning apps and profiles to groups at scale.
- CSV Import / Export
Export assignments to CSV and import them back for repeatable workflows.
- Audit Log
Review Intune assignment changes with date range and activity filters.
- Deployment Status
Monitor app install failures and profile deployment errors.
What it does¶
Intune Assignments Manager connects to your Microsoft 365 tenant via the Microsoft Graph API and provides:
- Unified browsing of all mobile apps and Settings Catalog configuration profiles in your Intune tenant
- Bulk assignment of multiple apps and profiles to multiple Azure AD groups in a single operation
- Conflict detection when the same group is targeted with different assignment settings
- Safe merging of new assignments with existing ones (the Graph API replaces all assignments on each POST, so the app always fetches current state first)
- CSV workflows for exporting current assignments and importing new ones
- Audit visibility into recent assignment-related changes in your tenant
- Deployment monitoring for app install and profile deployment failures
All operations use the Microsoft Graph beta endpoint and require appropriate Intune administrator permissions.