IntuneAccess
5.0.0
Read-only Microsoft Intune evidence explorer: why a policy or app did not apply, what changed, what a group change will affect, who can do what, and Scoped permissions readiness. Quick start: Install-Module -Name IntuneAccess -Scope CurrentUser; Start-IntuneAccess
Minimum PowerShell version
7.0
Installation Options
Owners
Copyright
(c) 2026 Control Alt Delete Tech Bits contributors. MIT licensed.
Package Details
Author(s)
- Mark Oldham
Tags
Intune RBAC MicrosoftGraph Security ReadOnly Troubleshooting Audit LeastPrivilege ScopeTags EntraID
Functions
Connect-IntuneAccess Compare-IntuneAdminAccess Compare-IntuneAccessSnapshot Export-IntuneAccessData Export-IntuneAccessReport Export-IntuneAccessSnapshot Get-IntuneAdminAccess Get-IntuneAssignmentImpact Get-IntuneApplicationEvidence Get-IntuneAutopilotTimeline Get-IntuneDevice360 Get-IntuneDeviceAssignmentExplanation Get-IntuneDeviceEstateInsight Get-IntuneDeviceHygiene Get-IntunePolicyConflict Get-IntuneRoleAssignment Get-IntuneScopedPermissionImpact Get-IntuneChangePreview Get-IntuneChangeTimeline Get-IntuneDeliveryChain Get-IntunePrivilegeUsage Get-IntuneScopedPermissionReadiness Get-IntuneScopeTagAudit Get-IntuneUser360 Get-IntuneUpdateCompliance Start-IntuneAccess Test-IntuneResourceAccess
PSEditions
Dependencies
-
- Microsoft.Graph.Authentication (>= 2.0.0)
Release Notes
IntuneAccess 5.0.0: why did a policy or app not apply (evidence chain with next check), what changed (audit, configuration and result timeline with failure correlation), change preview for groups, filters and scope tags, least-privilege review from Intune audit activity, and Scoped permissions readiness reconciled with the Permissions Assessment Report. Report opens on a triage page. Read only; no new Graph permissions. See RELEASE_NOTES.md. Quick start: Install-Module -Name IntuneAccess -Scope CurrentUser; Start-IntuneAccess.
FileList
- IntuneAccess.nuspec
- SECURITY.md
- Private\Get-IntuneAccessOperationalEvidence.ps1
- Private\ConvertTo-IntuneAccessDeploymentOutcome.ps1
- RELEASE_NOTES.md
- Private\Get-IntuneAccessRoleAssignments.ps1
- IntuneAccess.psm1
- Private\Get-IntuneAccessProperty.ps1
- README.md
- Private\ConvertTo-IntuneAccessInsightsHtml.ps1
- LICENSE
- Private\Get-IntuneAccessAuditEvents.ps1
- THIRD-PARTY-NOTICES.md
- Private\ConvertTo-IntuneAccessPolicySetting.ps1
- IntuneAccess.psd1
- Private\Get-IntuneAccessManagedDeviceUserMembership.ps1
- IntuneAccess.Format.ps1xml
- Private\Compare-IntuneAccessFindingEvidence.ps1
- examples\Example-IntuneAccess.ps1
- Private\Get-IntuneAccessActionCentre.ps1
- Public\Get-IntuneDevice360.ps1
- Private\Get-IntuneAccessPolicySettings.ps1
- Public\Get-IntuneAutopilotTimeline.ps1
- Private\Get-IntuneAccessChangeTimeline.ps1
- Public\Get-IntuneScopedPermissionReadiness.ps1
- Private\ConvertFrom-IntuneAccessSnapshotJson.ps1
- Public\Get-IntuneDeviceEstateInsight.ps1
- Private\ConvertTo-IntuneAccessWorkloadAssignment.ps1
- Public\Get-IntuneAssignmentImpact.ps1
- Private\Get-IntuneAccessTenantRbac.ps1
- Public\Get-IntuneChangePreview.ps1
- Private\Get-IntuneAccessFleetAssignmentExplanation.ps1
- Public\Get-IntuneApplicationEvidence.ps1
- Private\Resolve-IntuneAccessDeviceAssignment.ps1
- Public\Get-IntuneUpdateCompliance.ps1
- Private\Get-IntuneAccessApplicationEvidence.ps1
- Public\Compare-IntuneAdminAccess.ps1
- Private\ConvertTo-IntuneAccessHtml.ps1
- Public\Test-IntuneResourceAccess.ps1
- Private\Get-IntuneAccessAutopilotEvidence.ps1
- Public\Get-IntuneDeviceHygiene.ps1
- Private\Get-IntuneAccessDeliveryChain.ps1
- Public\Get-IntuneDeviceAssignmentExplanation.ps1
- Private\Get-IntuneAccessByteHash.ps1
- Public\Get-IntuneUser360.ps1
- Private\ConvertFrom-IntuneAccessActionName.ps1
- Public\Export-IntuneAccessReport.ps1
- Private\Get-IntuneAccessInsightSource.ps1
- Public\Get-IntuneScopedPermissionImpact.ps1
- Private\Resolve-IntuneAccessGroups.ps1
- Public\Get-IntunePrivilegeUsage.ps1
- Private\Get-IntuneAccessScopeTags.ps1
- Public\Get-IntuneRoleAssignment.ps1
- Private\Assert-IntuneAccessConnection.ps1
- Public\Get-IntuneScopeTagAudit.ps1
- Assets\Icons\shield-check.svg
- Public\Get-IntuneDeliveryChain.ps1
- Assets\Icons\funnel.svg
- Public\Compare-IntuneAccessSnapshot.ps1
- Assets\Icons\lock.svg
- Public\Start-IntuneAccess.ps1
- Assets\Icons\magnifying-glass.svg
- Public\Export-IntuneAccessData.ps1
- Assets\Icons\calendar-blank.svg
- Public\Connect-IntuneAccess.ps1
- Assets\Icons\buildings.svg
- Public\Get-IntuneAdminAccess.ps1
- Assets\Icons\users-three.svg
- Public\Get-IntunePolicyConflict.ps1
- Assets\Icons\Phosphor-LICENSE
- Public\Export-IntuneAccessSnapshot.ps1
- Assets\Icons\x.svg
- Public\Get-IntuneChangeTimeline.ps1
- Assets\Icons\question.svg
- docs\architecture.md
- Assets\Icons\arrow-right.svg
- docs\limitations.md
- Assets\Icons\arrow-square-out.svg
- docs\effective-access-model.md
- Assets\Icons\app-window.svg
- docs\v4-release-audit-current.md
- Assets\Icons\user-circle.svg
- docs\permissions.md
- Assets\Icons\devices.svg
- docs\v4-local-testing.md
- Assets\Icons\lightbulb.svg
- docs\troubleshooting.md
- Assets\Fonts\SpaceGrotesk-Variable.ttf
- Assets\action-centre.html
- Assets\Fonts\IBMPlexMono-SemiBold.ttf
- Assets\IntuneAccess-Gallery-Icon.svg
- Assets\Fonts\IBMPlexMono-OFL.txt
- Private\ConvertTo-IntuneAccessActionCentreHtml.ps1
- Assets\Fonts\IBMPlexMono-Regular.ttf
- Private\Resolve-IntuneAccessUser.ps1
- Assets\Fonts\SpaceGrotesk-OFL.txt
- Private\Resolve-IntuneScopedPermissionImpact.ps1
- Assets\RemediationLibrary\system-disk-space\README.md
- Private\Get-IntuneAccessScopedReadiness.ps1
- Assets\RemediationLibrary\system-disk-space\Detect.ps1
- Private\Get-IntuneAccessOutcomeCategory.ps1
- Assets\RemediationLibrary\application-detection\Convert-ApplicationRules.ps1
- Private\ConvertTo-IntuneAccessSnapshot.ps1
- Assets\RemediationLibrary\application-detection\New-DetectionProposal.ps1
- Private\Get-IntuneAccessEstateInsight.ps1
- Assets\RemediationLibrary\application-detection\README.md
- Private\Get-IntuneAccessDeviceIntelligence.ps1
- Assets\RemediationLibrary\application-detection\Detect.ps1
- Private\Get-IntuneAccessGroupMembership.ps1
- Assets\RemediationLibrary\application-detection\configuration.example.json
- Private\Get-IntuneAccessResolutionGuide.ps1
- Assets\RemediationLibrary\update-source-migration\README.md
- Private\Get-IntuneAccessRoleDefinitions.ps1
- Assets\RemediationLibrary\update-source-migration\Review-UpdatePolicies.ps1
- Private\ConvertTo-IntuneAccessExplorerHtml.ps1
- Assets\RemediationLibrary\update-source-migration\Detect.ps1
- Private\Get-IntuneAccessAdminGroupUsers.ps1
- Assets\RemediationLibrary\update-source-migration\configuration.example.json
- Private\Get-IntuneAccessWorkloadAssignments.ps1
- Assets\RemediationLibrary\investigation-common\Collect-Evidence.ps1
- Private\Get-IntuneAccessPolicyTargetOverlap.ps1
- Assets\RemediationLibrary\investigation-common\Get-AdditionalDeviceEvidence.ps1
- Private\Get-IntuneAccessUpdateComplianceEvidence.ps1
- Assets\RemediationLibrary\investigation-common\Compare-Evidence.ps1
- Private\Get-IntuneAccessAllowedActions.ps1
- Assets\RemediationLibrary\investigation-common\Review-Evidence.ps1
- Private\Invoke-IntuneAccessGraphRequest.ps1
- Assets\RemediationLibrary\device-evidence-comparison\README.md
- Private\Get-IntuneAccessDeviceMembership.ps1
- Assets\RemediationLibrary\device-evidence-comparison\Detect.ps1
- Private\Get-IntuneAccessTenant.ps1
- Assets\RemediationLibrary\device-evidence-comparison\configuration.example.json
- Private\Compare-IntuneAccessSnapshotCollection.ps1
- Assets\RemediationLibrary\ime-service\README.md
- Private\Get-IntuneAccessRemediationLibrary.ps1
- Assets\RemediationLibrary\ime-service\Remediate.ps1
- Private\Get-IntuneAccessErrorReference.ps1
- Assets\RemediationLibrary\ime-service\Detect.ps1
- Private\Get-IntuneAccessChangePreview.ps1
- Assets\RemediationLibrary\policy-residue\README.md
- Private\Get-IntuneAccessWorkloadType.ps1
- Assets\RemediationLibrary\policy-residue\Review-PolicyHistory.ps1
- Private\Resolve-IntuneAccessPermissions.ps1
- Assets\RemediationLibrary\policy-residue\Detect.ps1
- Private\Get-IntuneAccessAuditedResources.ps1
- Assets\RemediationLibrary\policy-residue\configuration.example.json
- Private\Get-IntuneAccessRemediationEffectiveness.ps1
- Assets\RemediationLibrary\policy-residue\New-PolicyObservationConfiguration.ps1