Documentation

Updates & Policies

Configure update behavior per app and tenant, trigger updates manually, and audit the full update execution history.

Policy Types

TypeBehavior
auto_updateAutomatically triggers updates using saved deployment configuration
notifyShows update availability without auto deployment
ignoreSuppresses update actions for the app
pin_versionPins app to a specific version

Endpoints

MethodPathPurpose
GET/PATCH/api/updates/availableRead available updates and dismiss/restore entries
POST/api/updates/triggerTrigger single/bulk updates (max 10 per request)
GET/api/updates/historyRead auto-update history and statuses
GET/POST/api/update-policiesList and upsert policies
GET/PATCH/DELETE/api/update-policies/[id]Read, modify, or delete a specific policy

Trigger Behavior

  1. Validates requested app update records for user + tenant context.
  2. Ensures a policy exists (or derives one from prior deployment data).
  3. Temporarily enforces auto-update for manual run execution.
  4. Creates update history and packaging job records.
  5. Restores original policy mode when manual trigger completes.

Safety Controls

Update logic applies failure thresholds, cooldown windows, and rate caps to reduce deployment risk.

Assignment Intents

When deploying an app (or triggering an update), IntuneGet supports four assignment intents that control how Intune installs the package:

IntentBehavior
RequiredAutomatically installs the app on all targeted devices
AvailableMakes the app available in Company Portal for users to install on demand
UninstallRemoves the app from targeted devices
Update OnlyAssigns as required but adds a requirement rule so that only devices where the app is already installed receive the update

Update Only for Discovered Apps

The Update Only intent is especially useful for discovered/unmanaged apps. It updates existing installations without force-installing the app on devices that do not already have it. See the Unmanaged Apps documentation for full details on how requirement rules are generated and the app-level caveat when mixing intents.