POWERSHELL / MICROSOFT.GRAPH.AUTHENTICATION
ProIntermediateRead-onlylow

Export Intune configuration profiles and assignments

Exports stable Microsoft Graph v1.0 Intune device configuration profiles and assignment targets for administration and configuration inventory.

Pro generation after license validation · Review before running · No tenant access

What this PowerShell script does

Exports stable Microsoft Graph v1.0 Intune device configuration profiles and assignment targets for administration and configuration inventory.

Requirements

  • CSV output path - Example: C:\\Temp\\intune-report.csv

Environment

  • Module: Microsoft.Graph.Authentication
  • Permissions: DeviceManagementConfiguration.Read.All
  • Output: CSV report
  • Context: PowerShell 7 · Microsoft Graph
  • Risk: Low
Review before you run Review the generated PowerShell and scope before running it.
OPS / WORKSPACE

Ready to generate

Configure Export Intune configuration profiles and assignments in the Builder, review the generated PowerShell and run it in your own environment.

Why use this template?

Use this report to inventory the stable Microsoft Graph v1.0 deviceConfigurations collection and its assignment targets. It deliberately does not present Settings Catalog configurationPolicies as stable coverage while Microsoft documents that API under Graph beta.

The template uses Microsoft.Graph.Authentication and requires DeviceManagementConfiguration.Read.All. Output: CSV report. Level: Intermediate. Action: Read-only. Risk: Low.

Review before running

Review the generated script before you run it and test outside production first. Opselith does not connect to your tenant or execute the script on your behalf.

Generate the script

  1. Open the template in the PowerShell Builder.
  2. Enter the requested values and review the module, permissions, output and risk.
  3. Generate the script, read it carefully, and test it outside production before use.

For Pro templates, only the configuration values needed by this template are sent to Opselith after license validation. The script source remains server-side until generation.

Generate Export Intune configuration profiles and assignments →
OPS / SCRIPT DETAILS

Script details

Exports stable Microsoft Graph v1.0 Intune device configuration profiles and assignment targets for administration and configuration inventory. Review these details before generating or running the script.

intuneconfigurationprofilespolicyassignmentsexport

What it works with

Module: Microsoft.Graph.Authentication

Context: PowerShell 7 · Microsoft Graph · Microsoft Intune

Compatibility: PowerShell 7 is the supported target for this Microsoft Graph Intune template.

Permissions and impact

Permissions: DeviceManagementConfiguration.Read.All

Risk: Low

Execution impact: Read-only. The script reads Microsoft Intune data through Microsoft Graph and does not intentionally change policies, applications, enrollment records or managed devices.

Parameters

  • CSV output path - Use a new absolute Windows CSV path, for example C:\\Temp\\intune-report.csv. (Required)

Output

Output: CSV with ProfileId, DisplayName, ProfileType, Version, timestamps, assignment target type/ID, assignment filter metadata, Status and Error.

This template is part of the Pro library. The full Pro script is generated by Opselith after server-side license validation; only the configuration values needed by this template are sent for generation. No tenant connection is required. When you generate a Pro script, only the configuration values needed for that template are sent to Opselith after license validation.

Example use

Exports stable Microsoft Graph v1.0 Intune device configuration profiles and assignment targets for administration and configuration inventory.

Enter the required values in the Builder, review the generated script and confirm the output before running it.

Before you run: Use PowerShell 7 with Microsoft.Graph.Authentication. Sign in with DeviceManagementConfiguration.Read.All, choose a new CSV path and note that this stable report covers deviceConfigurations rather than beta Settings Catalog configurationPolicies.
ValidationRecorded evidenceQA reviewed
Static QAPassed
PSScriptAnalyzerPassed
Runtime testedNot yet recorded
Last validatedNot yet recorded

Runtime and community evidence change only after an external tester result is reviewed and accepted for release evidence.

Tester: report a result →