Skip to main content

Auto-Creating Intune Assignments

In the previous tutorial, we imported an app into Intune without any assignments. This time, we'll have Robopack automatically create Entra ID security groups and assign them during import — saving you the manual work in Intune and Entra ID.

Video Walkthrough​

What you'll need​

  • A connected Intune tenant with Admin Consent authorization
  • Group.ReadWrite.All permission granted (included in Admin Consent)

Step-by-Step Guide​

1. Search for and build an app​

Search for an app — for example, 7-Zip. Click Analyze and Build, then Continue to build the package.

2. Enable Create Deployment Assignments​

When importing to Intune, tick Create Deployment Assignments. This tells Robopack to create Entra ID security groups and assign them to the app in Intune.

3. Review the groups​

Robopack will create three groups for the app:

GroupAssignment typePurpose
Robopack 7-Zip - RequiredRequiredApp is automatically installed on devices in this group
Robopack 7-Zip - AvailableAvailableApp appears in Company Portal for self-service install
Robopack 7-Zip - UninstallUninstallApp is removed from devices in this group

These groups are created in Entra ID but start empty — Robopack doesn't decide who should receive the app, only which groups should be assigned.

4. Import the app​

Click Import App. Robopack builds the package, uploads it to Intune, creates the three Entra ID groups, and assigns them to the app.

5. Verify in Intune​

Click Show in Intune and scroll to Properties > Assignments. You'll see the three groups already assigned:

  • Robopack 7-Zip - Required
  • Robopack 7-Zip - Available
  • Robopack 7-Zip - Uninstall

6. Add members to the groups​

Head to the Groups section in Intune or the Entra portal, find the group (e.g. Robopack 7-Zip - Required), and add the users or devices that should receive the application.

What's next?​

Apps get updated frequently. In the next tutorial, you'll learn how to automate app updates with Robopatch Flows and Deployment Waves so you never have to manually re-import an update.