Intune Assignment Explorer

One-time setup — Azure App Registration

Go to portal.azure.com → Azure Active Directory → App registrations → New registration
Give it a name (e.g. Intune Explorer), leave defaults, click Register
Under Authentication, add a platform: choose Single-page application and set the redirect URI to this page's URL:

⚠️ Azure requires the redirect URI to start with https:// (or http://localhost). This page is currently served over plain HTTP — enable HTTPS on IIS first, then revisit this page to get the correct URI.
Under API permissions, add these Microsoft Graph delegated permissions:
DeviceManagementApps.Read.All
DeviceManagementConfiguration.Read.All
DeviceManagementManagedDevices.Read.All
Group.Read.All User.Read
Policy.Read.All AuditLog.Read.All (for Conditional Access + Sign-in Logs)
Click Grant admin consent for your organisation
Copy the Application (client) ID and Directory (tenant) ID from the app's Overview page and paste them below

Overview