Files

Tomas Kracmar e13d14edcb feat(toolkit): complete macOS Intune Toolkit v1

Core enhancements:
- Expanded default export/import scope to ~45 object types including DeviceManagementIntents
- Added -AllPages pagination support across Graph queries for large tenants
- Invoke-GraphRequest now throws on 4xx/5xx instead of silently returning null
- Added macOS Keychain fallback for secret retrieval in headless auth flow
- Added NameSearchPattern/NameReplacePattern mutation support through export/import forms

New toolkit scripts:
- Bulk-AppAssignment.ps1: bulk-assign apps to groups/All Users/All Devices
- Bulk-AssignmentManager.ps1: add/remove assignments for any policy type with correct @odata.type
- Backup-Restore-Assignments.ps1: JSON backup with cross-tenant group resolution
- Export-AssignmentsToCsv.ps1: CSV/Markdown documentation output
- Bulk-RenamePolicies.ps1: regex search/replace and prefix mutations
- Bulk-DeviceOperations.ps1: delete/retire/wipe/lock/sync with -WhatIf safeguards
- Start-IntuneManagementTui.ps1: interactive terminal UI for headless operations
- Create-IntuneManagementApp.ps1: helper for app registration setup

Updated existing scripts:
- Export-Policies.ps1 / Import-Policies.ps1: wired mutation params through
- Start-HeadlessIntune.ps1: integrated TUI and new parameter forwarding

2026-04-14 15:11:09 +02:00

IntuneManagement.Headless.psd1

Add headless macOS CLI workflow

2026-04-08 15:18:32 +02:00

IntuneManagement.Headless.psm1

feat(toolkit): complete macOS Intune Toolkit v1

2026-04-14 15:11:09 +02:00

README.md

Make browser auth app id optional

2026-04-08 19:10:45 +02:00

README.md

Headless Runtime

This folder contains the reusable CLI module for the repo.

Module

Exported commands

Get-DefaultIntunePolicyObjectTypes
Export-IntunePolicies
Import-IntunePolicies
Invoke-IntunePolicyAction

Example

Import-Module ./Headless/IntuneManagement.Headless.psd1

Export-IntunePolicies `
  -TenantId "<source-tenant-id>" `
  -AppId "<app-id>" `
  -Secret "<client-secret>" `
  -ExportPath "/tmp/intune-export"

Export-IntunePolicies `
  -TenantId "<source-tenant-id>" `
  -AuthMode Browser `
  -RedirectUri "http://localhost" `
  -ExportPath "/tmp/intune-export"