User assignments for apps
What Is This Page?
The User App Assignments page shows every Intune application that is targeted at a specific user — resolved automatically through all their group memberships, including All Users targeting and nested groups. You enter a name or email address, and Intune Assistant works out the complete app entitlement picture for that person.
Why Would You Use This?
A user says an app is missing from their Company Portal — you need to find out why it is not appearing
You want to confirm that all required apps will be automatically installed for a new employee
You are doing an access review and need to document which apps a specific person can install
An app is installing on a user's device unexpectedly and you need to trace which group is responsible
You need to report on app entitlements for audit or compliance purposes
You want to verify that an app marked for uninstall is correctly targeted at a user
How to Use This Page
Search by User
Navigate to Assistant > Assignments > User Assignments > Application Assignments
The page opens with a welcome card and a search area
Make sure Search for a User mode is active
Type the user's display name or UPN (email address) — partial names work
Press Enter or click Search
If multiple users match, a list of user cards is displayed — each showing the display name, UPN, and account status
Click View Assignments on the correct user
Intune Assistant fetches all app assignments for that user
The results table appears
You can paste a user Object ID (GUID) directly into the search field.
User Info Panel
After a user is selected and assignments are loaded, a summary card appears above the table:
Display Name
The user's full name as it appears in Entra ID
UPN
The user principal name — their email / login address
Account Status
Enabled or Disabled
User Type
Member (internal user) or Guest (external / B2B user)
Created
When the Entra ID account was created
Understanding the Table
Resource
The application name as it appears in Intune. The app type (Win32App, iOS Store App, etc.) is shown in smaller text below the name
Platform
Device platform the app targets — shown as a coloured badge: blue for Windows, grey for iOS, green for Android, purple for macOS
Assignment
How the app reaches the user — e.g., Entra ID Group, All Users. Shown as a badge. Exclude assignments are highlighted in red
Target
The specific group or built-in target (All Users, All Devices). For group assignments, member counts (users / devices / nested groups) are shown below the group name. The group name is clickable
Install Type
How the app is deployed — Required, Available, or Uninstall
Status
Assigned (green badge) or Not Assigned (grey badge)
Filter
The assignment filter applied (if any). Clickable to view the filter rule. Shows a green Inc badge for Include filters and a red Exc badge for Exclude filters
Install Types — What They Mean for the User
Required
The app is automatically pushed to the user's enrolled device(s). No action needed from the user
Available
The app appears in the Company Portal app. The user can choose to install it at any time
Uninstall
The app is actively removed from the user's enrolled device(s)
Understanding the difference between Required and Available is key when troubleshooting why an app is or is not present on a device. Required apps install silently; Available apps only install if the user requests them.
Dynamic Groups
When a group in the Target column has a small purple block icon next to its name, it is a dynamic group. Dynamic groups are automatically maintained by Entra ID based on a membership rule (e.g., all devices with a certain OS version, or all users in a specific department).
If the target group has nested groups inside it, a small amber question mark icon appears in the member count area. This means some devices or users in that group may themselves be groups. To fully understand the reach of that assignment, use the Group Assignments page to drill into the specific group.
Filters Panel
Click Filters to expand the filter controls:
Resource Type
Focus on a specific app type (Win32App, iOS Store App, Android Enterprise App, etc.)
Assignment Type
Show only specific targeting methods (e.g., only Entra ID Group, only All Users)
Status
Show only Assigned or only Not Assigned apps
Platform
Limit to a specific device platform
Install Type
Show only Required, Available, or Uninstall assignments
Filter Type
Show only assignments with an Include filter, an Exclude filter, or no filter
Use Clear Filters to reset everything at once.
Clicking on Groups
Group names in the Target column are clickable (highlighted in amber). Clicking opens a Group Details dialog showing:
Group display name and description
Membership type (Assigned or Dynamic)
Dynamic membership rule (if applicable)
Member counts: users, devices, and nested groups
Clicking on Filters
Filter names in the Filter column are clickable. A Filter Details dialog opens showing:
Filter display name and description
Platform scope
Management type (MDM or MAM)
The filter rule expression (e.g.,
(device.manufacturer -eq "Microsoft"))
Stats Bar
Above the results table, a stats strip shows:
Total Assignments
Number of rows in the current filtered view
Assigned
How many apps are actively assigned to the user
Not Assigned
Apps that exist in the tenant but are not targeted at this user
Resource Types
Number of distinct app types in the results
Platforms
Number of distinct platforms represented
Exporting the Data
Two export options are available via the Export button:
Standard Export
Exports all visible rows to CSV, PDF, or HTML. Includes:
Resource type and name
Assignment type and target
Platform
Install type
Status
Filter name and filter type
Filename: user-assignments-overview.csv (or .pdf / .html)
Export for Bulk Assignments
A structured CSV for use in bulk assignment workflows. Includes:
PolicyName (the app name)
GroupName
AssignmentDirection
AssignmentAction (pre-filled as
Add)Filter name and filter type
Filename: rollouts-overview.csv
💡 The bulk export is useful when you want to replicate a user's app assignment set to a new group or test environment.
Common Use Cases
Why does a user not see an app in Company Portal?
Search for the user. If the app is not in the results with Install Type = Available, no group is targeting the user for that app — check group memberships or add the user to the correct group.
Confirm a required app will install on a new hire's device
Search for the user after they have been added to onboarding groups. Look for the app with Install Type = Required — if it appears as Assigned, it will install automatically at next device check-in.
An app is installing on a device unexpectedly
Search for the user. Find the app with Install Type = Required. The Target column shows which group is pushing it — this is the group to investigate.
Access review: what apps can this user install from Company Portal?
Filter Install Type to Available and export the Standard Export to share with a reviewer.
Verify no apps are being uninstalled that should not be
Filter Install Type to Uninstall and review the list.
Pre-offboarding or licence review Export the full Standard Export before the account is disabled — gives you a complete record of app entitlements.
Related Pages
Last updated