# User assignments for apps ## What Is This Page? The **User App Assignments** page shows every Intune **application** that is targeted at a specific user — resolved automatically through all their group memberships, including All Users targeting and nested groups. You enter a name or email address, and Intune Assistant works out the complete app entitlement picture for that person. ## Why Would You Use This? * A user says an app is missing from their Company Portal — you need to find out why it is not appearing * You want to confirm that all required apps will be automatically installed for a new employee * You are doing an access review and need to document which apps a specific person can install * An app is installing on a user's device unexpectedly and you need to trace which group is responsible * You need to report on app entitlements for audit or compliance purposes * You want to verify that an app marked for uninstall is correctly targeted at a user ## How to Use This Page ### Search by User 1. Navigate to **Assistant > Assignments > User Assignments > Application Assignments** 2. The page opens with a welcome card and a search area 3. Make sure **Search for a User** mode is active 4. Type the user's display name or UPN (email address) — partial names work 5. Press **Enter** or click **Search** 6. If multiple users match, a list of user cards is displayed — each showing the display name, UPN, and account status 7. Click **View Assignments** on the correct user 8. Intune Assistant fetches all app assignments for that user 9. The results table appears > You can paste a user Object ID (GUID) directly into the search field. ## User Info Panel After a user is selected and assignments are loaded, a summary card appears above the table: | Field | What It Shows | | ------------------ | ----------------------------------------------------- | | **Display Name** | The user's full name as it appears in Entra ID | | **UPN** | The user principal name — their email / login address | | **Account Status** | Enabled or Disabled | | **User Type** | Member (internal user) or Guest (external / B2B user) | | **Created** | When the Entra ID account was created | ## Understanding the Table | Column | What It Means | | ---------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | **Resource** | The application name as it appears in Intune. The app type (Win32App, iOS Store App, etc.) is shown in smaller text below the name | | **Platform** | Device platform the app targets — shown as a coloured badge: blue for Windows, grey for iOS, green for Android, purple for macOS | | **Assignment** | How the app reaches the user — e.g., `Entra ID Group`, `All Users`. Shown as a badge. Exclude assignments are highlighted in red | | **Target** | The specific group or built-in target (`All Users`, `All Devices`). For group assignments, member counts (users / devices / nested groups) are shown below the group name. The group name is clickable | | **Install Type** | How the app is deployed — `Required`, `Available`, or `Uninstall` | | **Status** | **Assigned** (green badge) or **Not Assigned** (grey badge) | | **Filter** | The assignment filter applied (if any). Clickable to view the filter rule. Shows a green **Inc** badge for Include filters and a red **Exc** badge for Exclude filters | ### Install Types — What They Mean for the User | Install Type | What Happens on the User's Device | | ------------- | ---------------------------------------------------------------------------------------------------- | | **Required** | The app is **automatically pushed** to the user's enrolled device(s). No action needed from the user | | **Available** | The app appears in the **Company Portal** app. The user can choose to install it at any time | | **Uninstall** | The app is **actively removed** from the user's enrolled device(s) | > Understanding the difference between Required and Available is key when troubleshooting why an app is or is not present on a device. Required apps install silently; Available apps only install if the user requests them. ## Dynamic Groups When a group in the **Target** column has a small **purple block icon** next to its name, it is a **dynamic group**. Dynamic groups are automatically maintained by Entra ID based on a membership rule (e.g., all devices with a certain OS version, or all users in a specific department). If the target group has **nested groups** inside it, a small **amber question mark icon** appears in the member count area. This means some devices or users in that group may themselves be groups. To fully understand the reach of that assignment, use the [Group Assignments](broken://pages/b0fd2c7920868043ea2882379c85262ee83ff8a9) page to drill into the specific group. ## Filters Panel Click **Filters** to expand the filter controls: | Filter | What It Does | | ------------------- | ------------------------------------------------------------------------------------ | | **Resource Type** | Focus on a specific app type (Win32App, iOS Store App, Android Enterprise App, etc.) | | **Assignment Type** | Show only specific targeting methods (e.g., only Entra ID Group, only All Users) | | **Status** | Show only Assigned or only Not Assigned apps | | **Platform** | Limit to a specific device platform | | **Install Type** | Show only Required, Available, or Uninstall assignments | | **Filter Type** | Show only assignments with an Include filter, an Exclude filter, or no filter | Use **Clear Filters** to reset everything at once. ## Clicking on Groups Group names in the **Target** column are clickable (highlighted in amber). Clicking opens a **Group Details** dialog showing: * Group display name and description * Membership type (Assigned or Dynamic) * Dynamic membership rule (if applicable) * Member counts: users, devices, and nested groups ## Clicking on Filters Filter names in the **Filter** column are clickable. A **Filter Details** dialog opens showing: * Filter display name and description * Platform scope * Management type (MDM or MAM) * The filter rule expression (e.g., `(device.manufacturer -eq "Microsoft")`) ## Stats Bar Above the results table, a stats strip shows: | Stat | What It Shows | | --------------------- | --------------------------------------------------------------- | | **Total Assignments** | Number of rows in the current filtered view | | **Assigned** | How many apps are actively assigned to the user | | **Not Assigned** | Apps that exist in the tenant but are not targeted at this user | | **Resource Types** | Number of distinct app types in the results | | **Platforms** | Number of distinct platforms represented | ## Exporting the Data Two export options are available via the **Export** button: ### Standard Export Exports all visible rows to CSV, PDF, or HTML. Includes: * Resource type and name * Assignment type and target * Platform * Install type * Status * Filter name and filter type **Filename:** `user-assignments-overview.csv` (or `.pdf` / `.html`) ### Export for Bulk Assignments A structured CSV for use in bulk assignment workflows. Includes: * PolicyName (the app name) * GroupName * AssignmentDirection * AssignmentAction (pre-filled as `Add`) * Filter name and filter type **Filename:** `rollouts-overview.csv` > 💡 The bulk export is useful when you want to replicate a user's app assignment set to a new group or test environment. ## Common Use Cases **Why does a user not see an app in Company Portal?**\ Search for the user. If the app is not in the results with Install Type = `Available`, no group is targeting the user for that app — check group memberships or add the user to the correct group. **Confirm a required app will install on a new hire's device**\ Search for the user after they have been added to onboarding groups. Look for the app with Install Type = `Required` — if it appears as Assigned, it will install automatically at next device check-in. **An app is installing on a device unexpectedly**\ Search for the user. Find the app with Install Type = `Required`. The **Target** column shows which group is pushing it — this is the group to investigate. **Access review: what apps can this user install from Company Portal?**\ Filter Install Type to `Available` and export the Standard Export to share with a reviewer. **Verify no apps are being uninstalled that should not be**\ Filter Install Type to `Uninstall` and review the list. **Pre-offboarding or licence review**\ Export the full Standard Export before the account is disabled — gives you a complete record of app entitlements. ## Related Pages * [User Configuration Assignments](/intune-assistant/assignments/user-assignments/user-assignments-for-configuration-profiles.md) * [App Assignments](/intune-assistant/assignments/app-assignments.md) * [Group Assignments](/intune-assistant/assignments/group-assignments.md) * [All Assignments](/intune-assistant/assignments/all-assignments.md) --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.intuneassistant.cloud/intune-assistant/assignments/user-assignments/user-assignments-for-apps.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.