Intune roles, assignments and groups
Distinguish an Intune role from its assignments and the included or excluded groups, using the recovered assignment example.
Source-derived reference
These notes were recovered from OneNote. Configuration, permissions and operating results have not been freshly verified. Confirm the applicable authority and environment before acting.
Roles are fairly normal
Roles
There are a bunch of built in and custom Roles and they can be found
https://intune.microsoft.com/#view/Microsoft_Intune_DeviceSettings/RolesLandingMenuBlade/~/roles
Each Role can have zero or more Assignments.
An Assignment is a collections of 0 or more Groups which either include or exclude a user from the Role. An assignment itself is NOT a group, it is the container for groups of used for determining the membership to the Role.
Assignment example
The assignment name is highlighted in Green and the included user group is highlighted in yellow.
Screenshot retained for review
Roles can contain a collection of assignments.