v2.1.2-beta.1

New Features

• Added an option to override scopes when running authentication in interactive mode. Instead of using all required scopes for IntuneCD to target all payloads, you can now specify which scopes you want to have. When doing so, payloads not in a scope added must be excluded with -e. To override default scopes, use the new --scopes argument, for example --scopes DeviceManagementApps.ReadWrite.All DeviceManagementConfiguration.ReadWrite.All.

v2.1.1

New Features

• Option to exclude Managed Google Play last sync time by adding -e GPlaySyncTime.

Fixes

• If an assigned group on a role is removed from Entra, the group would be added as null in the backup causing the documentation to fail. This update removes null groups from the backup.

Full Changelog: v2.1.0...v2.1.1

v2.1.0

New features

• Backup, update, removal and documentation of custom Roles in Intune.
• Backup, update, removal and documentation of Scope Tags in Intune.
• Backup Activation Lock ByPass Codes for Apple devices, creates a JSON report of all codes.
• While batching, if a throttle 429 or 503 was thrown for a request in the batch the request was not retried causing inconsistent output in rare cases. This update adds 429 and 503 response handling in the batching.
• Added an option to exclude usedLicenseCount info during backup on VPP apps by adding -e VPPusedLicenseCount. This allows for a cleaner commit history.

Fixes

• Added an additional check for null app responses on ESP backup to allow for continuing even if an app has been removed.
• While batching filters, an empty guid was passed which caused a lot of 400 responses in the batches. This update excludes empty filter guids from the batching.

Notes

This update will require additional permissions added to the App Registration as Roles and Scope Tags are now included. Additional permissions required are,

• DeviceManagementRBAC.ReadWrite.All (or Read only for backup only scenarios)

If you do not want to add this additional permission, make sure you exclude the new payloads on run time, -e Roles ScopeTags.

Full Changelog: v2.0.8...v2.1.0

v2.1.0-beta.1

New features

• Added an option to exclude usedLicenseCount info during backup by adding -e VPPusedLicenseCount.

Fixes

• When 504 or 429 was detected in a batching request the retry was incorrectly formatted resulting in a 400 bad request upon retrying.

v2.0.9-beta.4

New features

• While batching, if a throttle 429 or 503 was thrown for a request in the batch the request was not retried causing inconsistent output in rare cases. This update adds 429 and 503 response handling in the batching.

Fixes

• While batching filters, a null guid was passed which caused a lot of 400 responses in the batches. This update excludes null filter guids from the batching.

v2.0.9-beta.3

New features

• Backup and update Scope Tags

Fixes

• An issue where role backup did not complete if a group had been removed from Entra

v2.0.9-beta.2

Updates

• Group IDs in roles backup is now converting to group names
• Only custom roles are now backed up
• Added updating/removal of roles
• Role exports are cleaned up a bit to get rid of unnecessary properties

v2.0.9-beta.1

New features

• Backup roles in Intune #161
• Backup Activation Lock Bypass Codes for iOS/macOS devices #157

Fixes

• Added an additional check for null app responses on ESP backup to allow for continuing even if an app has been removed #162

v2.0.8

Fixes

• Fixes a problem where App Protection could not be backed up if a global policy exists and assignments were included in the backup.

Full Changelog: v2.0.7...v2.0.8

v2.0.8-beta.1

Fixes

• A bug where App Protection was not able to backup if a global policy exists and assignments were included