# Welcome

## What Is Intune Assistant?

**Intune Assistant** is a community platform built for Microsoft Intune administrators. It gives you visibility, insight, and control over your Intune environment that simply does not exist in the native Microsoft Intune portal. Everything is designed to answer the questions you actually ask in your day-to-day work — faster and with less clicking.

At its core, Intune Assistant is **free for all Intune administrators**. The community features have no limitations and no expiry date. Optional licensed extensions are available for organizations that need automation, scheduled actions, advanced reporting, or human support.

## Who Is This Documentation For?

This documentation is written to be understood by everyone who works with or around Microsoft Intune, regardless of how technical their role is:

| Role                          | How You Will Use Intune Assistant                                                            |
| ----------------------------- | -------------------------------------------------------------------------------------------- |
| **IT Administrator**          | Day-to-day operations — checking assignments, troubleshooting user issues, auditing policies |
| **Infrastructure Architect**  | Designing and validating the structure of your Intune environment                            |
| **Security Engineer**         | Auditing configuration settings, detecting conflicts, reviewing Conditional Access           |
| **CISO / Compliance Officer** | Evidence of policy coverage, exportable reports, assignment and configuration audits         |
| **Helpdesk / Service Desk**   | Looking up what applies to a specific user or device without needing Intune portal access    |

## What Can Intune Assistant Do?

Intune Assistant is organized into several sections. Here is a quick overview of what is available and documented.

### Jump right in

<table data-view="cards"><thead><tr><th></th><th></th><th></th><th data-hidden data-card-cover data-type="files"></th><th data-hidden></th><th data-hidden data-card-target data-type="content-ref"></th></tr></thead><tbody><tr><td><h4><i class="fa-bolt">:bolt:</i></h4></td><td><strong>Quickstart</strong></td><td>Create your first site</td><td></td><td></td><td><a href="getting-started/quickstart">quickstart</a></td></tr><tr><td><h4><i class="fa-leaf">:leaf:</i></h4></td><td><strong>Editor basics</strong></td><td>Learn the basics of GitBook</td><td></td><td></td><td><a href="https://github.com/GitbookIO/gitbook-templates/blob/main/product-docs/broken-reference/README.md">https://github.com/GitbookIO/gitbook-templates/blob/main/product-docs/broken-reference/README.md</a></td></tr><tr><td><h4><i class="fa-globe-pointer">:globe-pointer:</i></h4></td><td><strong>Publish your docs</strong></td><td>Share your docs online</td><td></td><td></td><td><a href="broken-reference">Broken link</a></td></tr></tbody></table>

### Assignments

The Assignments section is the most widely used part of Intune Assistant. It lets you answer the question *"what is assigned to whom, and how?"* across your entire tenant — for policies, configurations, and applications.

Start getting insights using one of the features below.

| Page                                                                                                           | What It Does                                                                      |
| -------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------- |
| [All Assignments](https://docs.intuneassistant.cloud/intune-assistant/assignments/all-assignments)             | Tenant-wide view of every assignment across every resource type                   |
| [App Assignments](https://docs.intuneassistant.cloud/intune-assistant/assignments/app-assignments)             | Application-only view with install type (Required / Available / Uninstall)        |
| [Group Assignments](https://docs.intuneassistant.cloud/intune-assistant/assignments/group-assignments)         | Pick a group and see everything assigned to it, including nested group resolution |
| [Filter Assignments](https://docs.intuneassistant.cloud/intune-assistant/assignments/assignments-with-filters) | Explore how assignment filters are used and where each filter is applied          |
| [User Assignments](https://docs.intuneassistant.cloud/intune-assistant/assignments/user-assignments)           | Landing page for user-centric assignment lookup                                   |

### Configuration

The Configuration section gives you complete visibility into your Intune configuration policies — at both the policy level and the individual setting level. It spans all three policy engines in Intune: the modern Settings Catalog, legacy Device Configuration profiles, and Group Policy ingested via ADMX.

| Page                                                                          | What It Does                                                                                                                                            |
| ----------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------- |
| [Configuration Overview](https://docs.intuneassistant.cloud/broken-reference) | Landing page explaining the two views and how they work together                                                                                        |
| [Settings Overview](https://docs.intuneassistant.cloud/broken-reference)      | Setting-by-setting breakdown across all policy types. Automatically detects and flags duplicate and conflicting settings across overlapping assignments |

### Conditional Access *(coming soon in docs)*

Review and analyse Conditional Access policies across your tenant. Understand which users and conditions each policy targets, and export the full policy set for audit or documentation purposes.

### Devices *(coming soon in docs)*

Monitor device compliance status, enrolled device inventory, and configuration state across all platforms (Windows, iOS, Android, macOS).

### Compare *(coming soon in docs)*

Side-by-side policy comparison between tenants or between policy versions — useful for validating migrations, comparing environments, and identifying drift.

## How Intune Assistant Works

Intune Assistant connects to your Microsoft Intune tenant using **Microsoft Graph API** with delegated permissions through your own Azure AD / Entra ID account. It does not store your data — every page fetches live data from Microsoft Graph at the time you request it.

Authentication follows the standard Microsoft MSAL (Microsoft Authentication Library) flow:

1. You sign in with your Microsoft 365 work account
2. Intune Assistant requests only the Graph permissions it needs for the features you use
3. All data is fetched in real time and displayed in your browser session
4. Nothing is persisted on Intune Assistant servers

{% hint style="info" %}
**Multi-tenant:** If you manage multiple tenants (for example as an MSP or GDAP partner), you can switch between tenants using the tenant selector in the interface. All views automatically scope to the selected tenant.
{% endhint %}

## Key Concepts

Understanding a few core concepts will help you get more out of the documentation.

### Assignment Targets

Intune assigns policies and apps to **targets**. A target can be:

* **Entra ID Group** — a specific Entra AD group (included or excluded)
* **All Users** — every licensed user in the tenant
* **All Devices** — every enrolled device in the tenant

### Assignment Filters

An **assignment filter** refines which devices within a target group are actually evaluated for a policy. Filters are based on device properties (OS version, manufacturer, ownership type, etc.) and can either **include** (only evaluate if the rule matches) or **exclude** (skip if the rule matches) specific devices.

### Nested Groups

Azure AD supports group nesting — a group can be a member of another group. Intune Assistant resolves nesting automatically. When you look up a user or group, you see assignments that arrive via parent groups too, not just direct targeting.

### Policy Sources

Intune has three engines for device configuration:

| Source                   | Description                                                                                             |
| ------------------------ | ------------------------------------------------------------------------------------------------------- |
| **Settings Catalog**     | The modern, recommended way to configure settings. Covers thousands of individual settings per platform |
| **Device Configuration** | Older profile-based configuration, including OMA-URI custom settings                                    |
| **Group Policy**         | ADMX-based settings ingested into Intune via Administrative Templates or Group Policy Analytics         |

## Getting Started

If you are new to Intune Assistant, here is the recommended starting path:

1. **Sign in** at [community.intuneassistant.cloud](https://community.intuneassistant.cloud/) with your Microsoft 365 work account
2. **Select your tenant** from the tenant picker if you manage multiple environments
3. Navigate to **Assistant → Assignments → All Assignments** and click **Load Data** to see your full assignment landscape
4. Navigate to **Configuration → Policy Overview** and click **Load Policies** to see your policy inventory
5. Navigate to **Configuration → Settings Overview** and click **Load Settings** to run the duplicate and conflict analysis

{% hint style="info" %}
**Tip — Start with the assignment overview.** The most common use case for a new user is understanding the assignment landscape. The [All Assignments](https://docs.intuneassistant.cloud/intune-assistant/assignments/all-assignments) page gives you the broadest view with the fewest clicks.
{% endhint %}

{% hint style="info" %}
**Tip — For troubleshooting a specific user.** Go straight to [User Configuration Assignments](https://docs.intuneassistant.cloud/intune-assistant/assignments/user-assignments/user-assignments-for-configuration-profiles) or [User App Assignments](https://docs.intuneassistant.cloud/intune-assistant/assignments/user-assignments/user-assignments-for-apps) and search for the user by name or email address.
{% endhint %}

## Feedback and Contributions

Found something missing or unclear in the documentation? Spotted a bug in the product?

* **Product feedback:** Use the feedback option in the app or visit [community.intuneassistant.cloud](https://community.intuneassistant.cloud/)
* **Documentation:** Raise an issue or submit a pull request in the repository

*Intune Assistant — built by the community, for the community.*

## Beta program

Intune Assistant continues gets new features. Every feature is tested as much as possible in several different environments. If you want to early test features as well and join the beta program, send the builder a message using LinkedIn. You well get very early access to new features.&#x20;


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.intuneassistant.cloud/readme.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.