Assignment Properties

[robmc-itpro]

Hi,

It would be good if we were able to set the assignment properties. For me specifically I'd like to be able to set the filter mode, filter and delivery optimization priority.

Thank you for your work so far.

[svrooij]

That is a great idea, do you by any chance have a sample request on how that works exactly?

[robmc-itpro]

Hopefully this helps. Assignment settings are at the bottom.

{
    "@odata.context": "https://graph.microsoft.com/beta/$metadata#deviceAppManagement/mobileApps(categories(),assignments())/$entity",
    "@odata.type": "#microsoft.graph.win32LobApp",
    "@microsoft.graph.tips": "Use $select to choose only the properties your app needs, as this can lead to performance improvements. For example: GET deviceAppManagement/mobileApps('<guid>')?$select=createdDateTime,dependentAppCount",
    "id": "690929b9-aa4d-4e54-8dc3-3beae6c57dfc",
    "displayName": "7-Zip",
    "description": "7-Zip is a file archiver with a high compression ratio.",
    "publisher": "Igor Pavlov",
    "createdDateTime": "2024-09-24T10:30:38.7174682Z",
    "lastModifiedDateTime": "2024-09-24T10:30:38.7174682Z",
    "isFeatured": false,
    "privacyInformationUrl": null,
    "informationUrl": "https://7-zip.org/",
    "owner": null,
    "developer": "Igor Pavlov",
    "notes": "Generated by WingetIntune at 24/09/2024 10:30:34 +00:00 [WinTuner|Winget|7zip.7zip]",
    "uploadState": 1,
    "publishingState": "published",
    "isAssigned": false,
    "roleScopeTagIds": [
        "0"
    ],
    "dependentAppCount": 0,
    "supersedingAppCount": 0,
    "supersededAppCount": 0,
    "committedContentVersion": "1",
    "fileName": "7z2408-x64.intunewin",
    "size": 1924432,
    "installCommandLine": "msiexec /i 7z2408-x64.msi /qn /norestart",
    "uninstallCommandLine": "msiexec /x {23170F69-40C1-2702-2408-000001000000} /qn /norestart",
    "applicableArchitectures": "x64",
    "minimumFreeDiskSpaceInMB": null,
    "minimumMemoryInMB": null,
    "minimumNumberOfProcessors": null,
    "minimumCpuSpeedInMHz": null,
    "setupFilePath": "7z2408-x64.msi",
    "minimumSupportedWindowsRelease": "2004",
    "displayVersion": "24.08",
    "allowAvailableUninstall": true,
    "largeIcon": {
        "type": "image/png",
        "value": "iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAACXBIWXMAAAsTAAALEwEAmpwYAAAARUlEQVR4nGNgGAzgP4WY4T+5AMUAfLYQbQAuRWS5AN0AbPI4DUCzAZutuA1AV4jPQPoagMc7xEUjwUAkB8ANoDQpDywAANsEt1e/oiRqAAAAAElFTkSuQmCC"
    },
    "minimumSupportedOperatingSystem": {
        "v8_0": false,
        "v8_1": false,
        "v10_0": false,
        "v10_1607": false,
        "v10_1703": false,
        "v10_1709": false,
        "v10_1803": false,
        "v10_1809": false,
        "v10_1903": false,
        "v10_1909": false,
        "v10_2004": true,
        "v10_2H20": false,
        "v10_21H1": false
    },
    "detectionRules": [
        {
            "@odata.type": "#microsoft.graph.win32LobAppProductCodeDetection",
            "productCode": "{23170F69-40C1-2702-2408-000001000000}",
            "productVersionOperator": "greaterThanOrEqual",
            "productVersion": "24.08.00.0"
        }
    ],
    "requirementRules": [],
    "rules": [
        {
            "@odata.type": "#microsoft.graph.win32LobAppProductCodeRule",
            "ruleType": "detection",
            "productCode": "{23170F69-40C1-2702-2408-000001000000}",
            "productVersionOperator": "greaterThanOrEqual",
            "productVersion": "24.08.00.0"
        }
    ],
    "installExperience": {
        "runAsAccount": "system",
        "maxRunTimeInMinutes": 60,
        "deviceRestartBehavior": "basedOnReturnCode"
    },
    "returnCodes": [
        {
            "returnCode": 0,
            "type": "success"
        },
        {
            "returnCode": 1707,
            "type": "success"
        },
        {
            "returnCode": 3010,
            "type": "softReboot"
        },
        {
            "returnCode": 1641,
            "type": "hardReboot"
        },
        {
            "returnCode": 1618,
            "type": "retry"
        }
    ],
    "msiInformation": {
        "productCode": "{23170F69-40C1-2702-2408-000001000000}",
        "productVersion": "24.08.00.0",
        "upgradeCode": null,
        "requiresReboot": false,
        "packageType": "perMachine",
        "productName": "7-Zip",
        "publisher": "Igor Pavlov"
    },
    "categories": [],
    "assignments@odata.context": "https://graph.microsoft.com/beta/$metadata#deviceAppManagement/mobileApps('690929b9-aa4d-4e54-8dc3-3beae6c57dfc')/microsoft.graph.win32LobApp/assignments",
    "assignments": [
        {
            "id": "acacacac-9df4-4c7d-9d50-4ef0226f57a9_0_0",
            "intent": "available",
            "source": "direct",
            "sourceId": null,
            "target": {
                "@odata.type": "#microsoft.graph.allLicensedUsersAssignmentTarget",
                "deviceAndAppManagementAssignmentFilterId": "e5f2ae0b-751f-4c9e-a00c-e7f7747997cb",
                "deviceAndAppManagementAssignmentFilterType": "include"
            },
            "settings": {
                "@odata.type": "#microsoft.graph.win32LobAppAssignmentSettings",
                "notifications": "showAll",
                "restartSettings": null,
                "installTimeSettings": null,
                "deliveryOptimizationPriority": "foreground",
                "autoUpdateSettings": null
            }
        }
    ]
}

[svrooij]

I'm not sure how that would look like in terms of parameters. You can always modify the assignments afterwards using Graph PowerShell. It are separate calls anyway. And you have a way to use the exact same token as this module to connect to Graph

Import-Module Microsoft.Graph.Devices.CorporateManagement
$token = ConvertTo-SecureString -Force -AsPlainText -String $(Get-WtToken) 
Connect-MgGraph -AccessToken $token

$params = @{
	"@odata.type" = "#microsoft.graph.mobileAppAssignment"
	intent = "required"
	target = @{
		"@odata.type" = "microsoft.graph.allLicensedUsersAssignmentTarget"
	}
	settings = @{
		"@odata.type" = "microsoft.graph.windowsUniversalAppXAppAssignmentSettings"
		useDeviceContext = $true
	}
}

New-MgDeviceAppManagementMobileAppAssignment -MobileAppId $appIdFromWinGet -BodyParameter $params

[AndrewRiceSCA]

I would find this useful as well. We use filters for user or device targeted apps based on architecture (ARM64/X64), or Vendors specific (Dell/Lenovo).

Would be helpful to have this as an option in Deploy-WtWin32App.

[svrooij]

@AndrewRiceSCA Have an idea how that would look like in powershell? Since it is an collection of assignments, where each assignment has these options. Maybe:

$assignment1 = [WinTunerAssignment]::new()
$assignemnt1.Target = "AllUsers"
$assignment1.Clause = "Include" / "Exclude"
$assignment1.OptionX = ....
$assignments = $( $assignment1 )
Deploy-WtWin32App .... -Assignments $assignments