Skip to content
Export and import Intune and Conditional Access configuration with Microsoft Graph and ASP.NET
Branch: master
Clone or download
nicolonsky Revert "WIP policy import (#29)"
This reverts commit 53034cc.

This reverts commit 53034cc.
Latest commit efa4de1 Feb 18, 2020

Build Status


The Modern Workplace Concierge is a helper tool to simplify your daily work with Microsoft 365 services. It allows you to:

  • Import and export Intune configuration and settings
  • Import and export Conditional Access policies
  • Download OSD ready offline Autopilot profiles
  • Re-Download stored PowerShell scripts in Intune (as PowerShell)
  • Import trello boards to Microsoft Planner

The tool is built on ASP.NET and works with the Microsoft Graph Beta API (because on the Beta endpoint are more entities available).

Supported entities

Supported configuration in imports and exports are documented on this project's wiki.

Consent and Permissions

To Authenticate with the Microsoft Graph API a multi tenant Azure AD application performs authentication and you will need to provide admin consent to the Azure AD application before you can use this tool.


As the tool performs only GET and POST requests to the Graph API no unitended or negative effects should occur. Additionally conditional access policies are imported as disabled to prevent a lockout.


All up- and downloaded data is processed in memory and not stored persistent. No usage data with Azure AD tenant ID's or Azure AD user information is collected. The app uses Azure application insights and traces the performance markers what-does-application-insights-monitor.

Host your own instance

If you cannot use the public instance of the ModernWorkplaceConcierge (because of legal and/or compliance reasons) you can deploy an instance in your Azure tenant. Wiki documentation for Self-hosting a custom instance.

Deploy to Azure

You can’t perform that action at this time.