What it works with
Module: Microsoft.Graph.Authentication
Context: PowerShell 7 · Microsoft Graph · Microsoft Intune
Compatibility: PowerShell 7 is the supported target for this Microsoft Graph Intune template.
POWERSHELL / MICROSOFT.GRAPH.AUTHENTICATION
ProIntermediateRead-onlylow
Export Intune application inventory and assignments
Exports Intune managed application inventory with assignment intent and target metadata while keeping per-app assignment failures visible.
Pro generation after license validation · Review before running · No tenant access
What this PowerShell script does
Exports Intune managed application inventory with assignment intent and target metadata while keeping per-app assignment failures visible.
Requirements
- CSV output path - Example: C:\\Temp\\intune-report.csv
Environment
- Module: Microsoft.Graph.Authentication
- Permissions: DeviceManagementApps.Read.All
- Output: CSV report
- Context: PowerShell 7 · Microsoft Graph
- Risk: Low
Review before you run Review the generated PowerShell and scope before running it.
OPS / WORKSPACE
Ready to generate
Configure Export Intune application inventory and assignments in the Builder, review the generated PowerShell and run it in your own environment.
Why use this template?
Use this report to inventory managed Intune applications together with deployment intent and assignment targets. Unassigned apps remain visible and per-app assignment failures are written into the report instead of being hidden.
The template uses Microsoft.Graph.Authentication and requires DeviceManagementApps.Read.All. Output: CSV report. Level: Intermediate. Action: Read-only. Risk: Low.
Review before running
Review the generated script before you run it and test outside production first. Opselith does not connect to your tenant or execute the script on your behalf.
Generate the script
- Open the template in the PowerShell Builder.
- Enter the requested values and review the module, permissions, output and risk.
- Generate the script, read it carefully, and test it outside production before use.
For Pro templates, only the configuration values needed by this template are sent to Opselith after license validation. The script source remains server-side until generation.
Generate Export Intune application inventory and assignments →OPS / SCRIPT DETAILS
Script details
Exports Intune managed application inventory with assignment intent and target metadata while keeping per-app assignment failures visible. Review these details before generating or running the script.
Permissions and impact
Permissions: DeviceManagementApps.Read.All
Risk: Low
Execution impact: Read-only. The script reads Microsoft Intune data through Microsoft Graph and does not intentionally change policies, applications, enrollment records or managed devices.
Parameters
- CSV output path - Use a new absolute Windows CSV path, for example C:\\Temp\\intune-report.csv.
Output
Output: CSV with AppId, DisplayName, AppType, Publisher, publishing metadata, AssignmentIntent, assignment target/filter metadata, Status and Error.
This template is part of the Pro library. The full Pro script is generated by Opselith after server-side license validation; only the configuration values needed by this template are sent for generation. No tenant connection is required. When you generate a Pro script, only the configuration values needed for that template are sent to Opselith after license validation.
Example use
Exports Intune managed application inventory with assignment intent and target metadata while keeping per-app assignment failures visible.
Enter the required values in the Builder, review the generated script and confirm the output before running it.
Before you run: Use PowerShell 7 with Microsoft.Graph.Authentication. Sign in with DeviceManagementApps.Read.All, choose a new CSV path and review application-assignment scope before using the export for deployment decisions.
ValidationRecorded evidenceQA reviewed
Static QAPassed
PSScriptAnalyzerPassed
Runtime testedNot yet recorded
Last validatedNot yet recorded
Runtime and community evidence change only after an external tester result is reviewed and accepted for release evidence.
Tester: report a result →Was this useful?One click. No email.