IntuneBackupAndRestore VS Intune

Generalist IaC tools are usually designed for repeatedly deploying the same core constructs (VMs etc), whereas Intune/M365 is more of a state/config mgmt scenario. M365DSC is ugly, but their newer Graph capabilities look promising. I use this though: https://github.com/jseerden/IntuneBackupAndRestore

Backup and Restore your Intune configurations. https://github.com/jseerden/IntuneBackupAndRestore

Azure Graph APIs with PowerShell. This process is oddly difficult to understand unless you have time to read page after page of Microsoft documentation. For instance I have the Microsoft scripts from https://github.com/MSEndpointMgr/Intune but non-admin account do not have rights to run things like set device primary user. And the guides I find tell me to setup an enterprise application but that changes the query authentication and the scripts no longer work. If you are going to release scripts explain the process to get started using them. I believe using Graph APIs would be amazing, you can not only retrieve information but post to update. The permissions just need to be easier to understand and use.

Here, use this, this is what I use https://github.com/MSEndpointMgr/Intune/blob/master/Security/Enable-BitLockerEncryption.ps1

I used this template Intune/whitelist.xml at master · MSEndpointMgr/Intune · GitHub

Not listed in the official MS docs, but it is mentioned here, here, and in the script that configures IIS from here.

If you want to take a look at a script where some thought was put in to it (unlike mine), take a look here: https://github.com/MSEndpointMgr/Intune/blob/master/Autopilot/Set-AutopilotDeviceGroupTag.ps1