What it works with
Module: Microsoft.Graph.Authentication
Context: PowerShell 7 · Microsoft Graph · Microsoft Intune
Compatibility: PowerShell 7 is the supported target for this Microsoft Graph Intune template.
POWERSHELL / MICROSOFT.GRAPH.AUTHENTICATION
FreeIntermediateRead-onlylow
Export Intune compliance policies and assignments
Exports Intune device compliance policies with assignment targets, preserving unassigned policies and per-policy read failures in a stable CSV report.
Generated locally in your browser · Review before running · No tenant access
What this PowerShell script does
Exports Intune device compliance policies with assignment targets, preserving unassigned policies and per-policy read failures in a stable CSV report.
Requirements
- CSV output path - Example: C:\\Temp\\intune-report.csv
Environment
- Module: Microsoft.Graph.Authentication
- Permissions: DeviceManagementConfiguration.Read.All
- Output: CSV report
- Context: PowerShell 7 · Microsoft Graph
- Risk: Low
Review before you run Review the generated PowerShell and scope before running it.
OPS / WORKSPACE
Ready to generate
Configure Export Intune compliance policies and assignments in the Builder, review the generated PowerShell and run it in your own environment.
Why use this template?
Use this report to inventory compliance policies and see whether each policy is unassigned or targeted to a group, all users or all devices. Assignment target IDs stay visible without adding a broader directory-read permission.
The template uses Microsoft.Graph.Authentication and requires DeviceManagementConfiguration.Read.All. Output: CSV report. Level: Intermediate. Action: Read-only. Risk: Low.
Review before running
The script is generated in your browser. Read it before you run it, and test it outside production first. “Read-only” describes the script itself; anything you add around it can still change data.
Generate the script
- Open the template in the PowerShell Builder.
- Enter the requested values and review the module, permissions, output and risk.
- Generate the script, read it carefully, and test it outside production before use.
The script is generated locally in your browser. Nothing needs to be uploaded to Opselith.
Generate Export Intune compliance policies and assignments →OPS / SCRIPT DETAILS
Script details
Exports Intune device compliance policies with assignment targets, preserving unassigned policies and per-policy read failures in a stable CSV report. Review these details before generating or running the script.
Permissions and impact
Permissions: DeviceManagementConfiguration.Read.All
Risk: Low
Execution impact: Read-only. The script reads Microsoft Intune data through Microsoft Graph and does not intentionally change policies, applications, enrollment records or managed devices.
Parameters
- CSV output path - Use a new absolute Windows CSV path, for example C:\\Temp\\intune-report.csv.
Output
Output: CSV with PolicyId, DisplayName, PolicyType, Version, timestamps, assignment target type/ID, assignment filter metadata, Status and Error.
This template is available in the free library and is generated locally in your browser.
Example use
Exports Intune device compliance policies with assignment targets, preserving unassigned policies and per-policy read failures in a stable CSV report.
Enter the required values in the Builder, review the generated script and confirm the output before running it.
Before you run: Use PowerShell 7 with Microsoft.Graph.Authentication. Sign in with DeviceManagementConfiguration.Read.All, confirm the tenant has Intune, choose a new CSV path and review the script before running it.
ValidationRecorded evidenceQA reviewed
Static QAPassed
PSScriptAnalyzerPassed
Runtime testedNot yet recorded
Last validatedNot yet recorded
Runtime and community evidence change only after an external tester result is reviewed and accepted for release evidence.
Tester: report a result →Was this useful?One click. No email.