> For the complete documentation index, see [llms.txt](https://docs.intuneassistant.cloud/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.intuneassistant.cloud/extensions/assignments-manager.md). # Assignments Manager ## Assignments Manager {% hint style="success" %} **Enterprise Feature** — This extension is available exclusively on the Enterprise license. Once activated, it becomes available in your frontend. {% endhint %} ### Overview Microsoft Intune assignment management is built for MSP\`s and enterprises (single and multi tenant). Assignments Manager standardizes, monitors, and validates policy assignments at scale with bulk-driven automation. ## Assignment Manager Standardize Microsoft Intune assignments across multiple tenants or complex enterprise environments from a single desired state file. Deploy, monitor, and maintain consistent assignments at scale with CSV-driven automation. * Multi-tenant & enterprise scale\ Deploy consistent assignment patterns across customer tenants (MSPs) or business units (enterprises). * Continuous compliance monitoring\ Validate assignments against your desired state CSV and catch configuration drift before it impacts users. * Enterprise-grade automation\ Bulk operations, safety validations, and audit trails designed for production environments. Perfect for MSPs and Large Enterprises Keep all your customers (multi tenant) "between the lines" by checking assignments using desired state files. *** ### Primary use cases Many MSPs use 'shipping ' tools to send policies from a baseline tenant to an edge tenant.\ See Assignments Manager as an extension at the top of that 'shipping' tool. So there is a baseline tenant that sends default policies to a tenant.\ \ Assignments Manager allows you to be very flexible to assign the shipped policies at the customer level at the time you want. #### For Managed Service Providers (MSPs) * **Standardize Intune assignments** across multiple customer tenants * **Monitor assignment drift** across your customers' tenants * **Automate desired state configuration** for new customers * **Scale operations** without manual work that doesn't scale *** ### What makes this different Unlike traditional assessment tools that only report what exists, Assignment Manager helps you **maintain** the desired state: * **Deploy** standardized assignments from your CSV templates * **Monitor** assignments compliance against your desired configuration * **Correct** drift when assignments don't match expectations Beyond assessment tools Most tools tell you what's there. This tool ensures that what **should** be there actually **stays** there. *** ### Quick start workflow This workflow is a widely use process {% stepper %} {% step %} ### Create your CSV template Create a bulk export of the needed policies using the Assignments Overview page. {% endstep %} {% step %} ### Open Assignment Manager Go to **Extensions → Assignment Manager** {% endstep %} {% step %} ### Upload CSV Upload your CSV to see what needs to change {% endstep %} {% step %} ### Review comparison Review the comparison against current tenant state {% endstep %} {% step %} ### Apply changes Apply changes and validate results {% endstep %} {% step %} ### Reuse template **Reuse the same CSV** across other tenants or environments {% endstep %} {% endstepper %} Template-driven consistency Develop your assignment templates once, then deploy them consistently across your entire infrastructure. *** ### Screenshots *** *** ### Multi-Admin Approval (MAA) {% hint style="warning" %} If your tenant has **Multi-Admin Approval** enabled for configuration policies, compliance policies, or scripts, the Assignments Manager will show an amber warning banner and all write operations will fail until the IntuneAssistant enterprise app is excluded. {% endhint %} Microsoft Intune's Multi-Admin Approval feature enforces a four-eyes principle for policy changes — including changes made via the Graph API by automation tools. When MAA is active and the IntuneAssistant backend API enterprise app is not excluded, every assignment change attempted through the Assignments Manager is rejected by Microsoft Graph with: ``` Header 'x-msft-approval-justification' is required to request approval. ``` This is not a permissions error — it is MAA blocking the call entirely. The change is not queued for approval; it simply fails. **To fix it:** add the IntuneAssistant enterprise app (`afe66ddf-67d4-4d61-8a51-beca7b799f52`) to the **App Exclusions** list of each active MAA policy in **Tenant administration → Multi Admin Approval**. [Multi-Admin Approval — full guide and step-by-step instructions](/extensions/assignments-manager/multi-admin-approval.md) *** ### Next steps [Create assignments template\ Learn how to create standardized assignment templates from existing tenant configurations or craft new ones from scratch.](/extensions/assignments-manager/intune-assignments/create-assignment-templates.md) [How it works\ The workflow: template → deploy → monitor → maintain across environments.](/extensions/assignments-manager/intune-assignments/workflow.md) [Needed Permissions\ Complete guide to configuring granular permissions for Intune Assistant users](/security-and-compliance/needed-permissions.md) [Needed Permissions\ Complete guide to configuring permissions for the Intune Assistant Assignments Manager extension](/extensions/assignments-manager/intune-assignments/needed-permissions.md) [Multi-Admin Approval (MAA)\ How to handle MAA policies and exclude IntuneAssistant to keep the Assignments Manager operational.](/extensions/assignments-manager/multi-admin-approval.md) --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.intuneassistant.cloud/extensions/assignments-manager.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.