# Intune roles, assignments and groups

Distinguish an Intune role from its assignments and the included or excluded groups, using the recovered assignment example.

!!!warning Source-derived reference
These notes were recovered from OneNote. Configuration, permissions and operating results have not been freshly verified. Confirm the applicable authority and environment before acting.
!!!

## Roles are fairly normal

## Roles

There are a bunch of built in and custom Roles and they can be found

<https://intune.microsoft.com/#view/Microsoft_Intune_DeviceSettings/RolesLandingMenuBlade/~/roles>

Each **Role** can have zero or more **Assignment**s.

An **Assignment** is a **collections of 0 or more Groups** which either include or exclude a user from the **Role**. An assignment itself is NOT a group, it is the container for groups of used for determining the membership to the Role.

### Assignment example

The assignment name is highlighted in Green and the included user group is highlighted in yellow.

[Screenshot retained for review](../../review/Review-status.md#asset-0f071291fb310077ab27)

Roles can contain a collection of assignments.

## Related guidance

- [Topic overview](Introduction.md)
- [Source review status](../../review/Review-status.md)