# User assignments

## What Is This Page?

The **User Assignments** section answers the question every helpdesk engineer, architect, and auditor eventually asks: *"What does this specific user actually receive from Intune?"*

Because Intune distributes policies and apps through groups, and users can be members of many groups, working out what applies to a single person is not straightforward in the native Intune portal. You would need to manually check every group a user belongs to, then cross-reference each group against every policy and app. That takes time and is error-prone.

Intune Assistant does this automatically. You search for a user, and the tool resolves all group memberships (nesting included) and returns the full list of what applies to that person.

## What You Can Look Up

The User Assignments section is split into two focused sub-pages:

### Configuration Assignments

Covers all **policies and configuration profiles** assigned to the user — compliance policies, device configuration profiles, security baselines, scripts, and similar resources.

[Go to User Configuration Assignments](/intune-assistant/assignments/user-assignments/user-assignments-for-configuration-profiles.md)

### Application Assignments

Covers all **applications** assigned to the user — both Required apps (automatically installed) and Available apps (visible in Company Portal).

[Go to User App Assignments](/intune-assistant/assignments/user-assignments/user-assignments-for-apps.md)

## Why Is This Split Into Two Pages?

The volume of data can be large. A user in a managed organization may have dozens of configuration policies and a completely separate set of app assignments. Keeping the views separate makes each page easier to navigate and read.

## How Assignment Resolution Works

When you search for a user, Intune Assistant:

1. Looks up the user in Entra ID
2. Retrieves all groups the user is a member of — including nested group memberships
3. Queries all Intune assignments
4. Matches assignments targeting any of those groups, plus All Users assignments
5. Returns the complete, merged result

This means you see the **effective** assignment picture — everything that reaches the user through any path.

<figure><img src="/files/az9DiFcFHnLbKHbmzJdF" alt=""><figcaption></figcaption></figure>

## Common Use Cases

**Why is this user getting a compliance policy they should not have?**\
Check their configuration assignments to see which group-based assignment is delivering it.

**Does this user have the required apps deployed?**\
Check their app assignments and confirm Required apps are listed.

**Pre-offboarding review**\
Check all assignments before disabling or deleting an account — document what the user had access to.

**New joiner validation**\
After adding a user to the correct groups, verify the expected policies and apps now appear.

## Related Pages

* [User Configuration Assignments](/intune-assistant/assignments/user-assignments/user-assignments-for-configuration-profiles.md)
* [User App Assignments](/intune-assistant/assignments/user-assignments/user-assignments-for-apps.md)
* [Group Assignments](/intune-assistant/assignments/group-assignments.md)
* [All Assignments](/intune-assistant/assignments/all-assignments.md)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.intuneassistant.cloud/intune-assistant/assignments/user-assignments.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.