Skip to content

Getting started

Jump to bottom
Jørgen Sundet edited this page Nov 27, 2025 · 8 revisions

Welcome to the IntuneAssignments wiki!

Prerequisites

There are some requirements and prerequisites you will need to take care of before using the application.

Please read through this section carefully.

Azure tenant

You will need access to an Azure tenant.

App registration

As of 17/10/2025 the app will now use the default Microsoft Graph Command Line Tools enterprise application in Entra ID. No need to create an app registration anymore!

API Permissions

The app registration requires the following permissions as type Delegated (Not Application).

  • "User.Read",
  • "Directory.Read.All",
  • "Application.Read.All",
  • "DelegatedPermissionGrant.Read.All",
  • "DeviceManagementApps.ReadWrite.All",
  • "DeviceManagementCloudCA.ReadWrite.All",
  • "DeviceManagementConfiguration.ReadWrite.All",
  • "DeviceManagementManagedDevices.ReadWrite.All",
  • "DeviceManagementRBAC.ReadWrite.All",
  • "DeviceManagementScripts.ReadWrite.All",
  • "DeviceManagementServiceConfig.ReadWrite.All"

These permissions are needed to both read and write in the Intune environment, to find groups for assignment, and to find the tenant name.

Clone this wiki locally