[ I N T U N E   M A A ]

Manage Intune Multi Admin Approval requests from your terminal.

Review, approve, and deny MAA requests — one PowerShell command.

Install Now GitHub
v1.0.3 · PowerShell 7.0+

Features

Everything you need to manage Intune MAA requests.

🛡

Full-Screen Terminal UI

Interactive TUI for browsing pending approval requests, viewing details, and taking action — all from your terminal.

Approve & Deny

Approve or deny individual requests with justification, or bulk approve all pending requests in a single flow.

📋

Payload Review

View detailed payload summaries including settings, assignments, and script content. From the request review screen, press S to open in VS Code or N to open in Notepad for a full review.

📦

Zero Config

Works out of the box with no app registration. Auto-installs required modules on first run — just install and go.

🔑

Custom App Registration

Optionally bring your own app registration with Configure-IntuneMAA for full control over authentication.

🔄

Auto-Updates

Automatically checks PowerShell Gallery for new versions on launch and prompts to update with the correct install method.

🌐

Cross-Platform

Works on Windows and macOS with PowerShell 7. Browser-based authentication with full Conditional Access support.

📁

All Resource Types

Supports apps, configuration profiles, compliance policies, scripts, Autopilot, update profiles, enrollment configs, and more.

Fast & Lightweight

Single PowerShell module with no heavy dependencies. Quick version checks via Gallery redirect — no slow API calls.

See It in Action

Review and approve MAA requests from start to finish.

Intune-MAA Demo

Quick Start

Up and running in two commands.

Install
Install-Module -Name Intune-MAA
Run
Start-MAAApproval
Optional: Custom App Registration
# Configure once, use anytime
Configure-IntuneMAA

Keyboard Shortcuts

Navigate the TUI with ease.

ShortcutAction
1-9Select a request
AApprove / Approve all
DDeny request
SOpen payload in VS Code
NOpen payload in Notepad
RRefresh request list
HHelp
BGo back
EExit

Supported Resource Types

Full coverage of Intune resource types.

Apps & Policies

  • Win32, MSI, Store, Web apps
  • Configuration profiles
  • Settings catalog policies
  • Compliance policies
  • Group policies
  • Approval policies

Scripts & Updates

  • Remediation scripts
  • Platform scripts
  • Feature update profiles
  • Quality update profiles
  • Driver update profiles

Devices & Enrollment

  • Autopilot profiles
  • Enrollment configurations
  • Device categories
  • Role definitions
  • Device actions (Wipe, Retire, Delete)

API Permissions

Required delegated permissions when using a custom app registration.

Delegated (Graph Beta)

  • DeviceManagementConfiguration.ReadWrite.All
  • DeviceManagementRBAC.ReadWrite.All
  • DeviceManagementManagedDevices.ReadWrite.All
  • DeviceManagementApps.ReadWrite.All
  • DeviceManagementScripts.ReadWrite.All