README out of sync: missing parameters, wrong permissions, incomplete menu docs

[ugurkocde]

Summary

The README has drifted from the current script (v3.10.0) in several areas: missing parameters, a removed parameter still listed, outdated permissions table, and incomplete interactive menu documentation.

---

1. Missing parameters from README parameters table

The following parameters exist in the script's param() block (lines 93-172) but are not listed in the README parameters table (lines 293-316):

Parameter	Script line	Description in script
-HTMLReportPath	line 128	Path for the exported HTML report file
-ShowFailedAssignments	line 137	Show all failed assignments
-IncludeNestedGroups	line 168	Include assignments inherited from parent groups
-ScopeTagFilter	line 171	Filter results by scope tag name
-SkipExecution	line 122	Skip execution (used for testing) - may intentionally be omitted

2. Removed parameter still listed in README

-ShowAdminTemplates is listed in the README parameters table (line 307) but does not exist in the script's param() block. It was removed in v3.4.0. This should be removed from the README.

3. Permissions table is outdated

README (lines 107-115) lists 7 permissions:

• User.Read.All
• Group.Read.All
• Device.Read.All
• DeviceManagementApps.Read.All
• DeviceManagementConfiguration.Read.All
• DeviceManagementManagedDevices.Read.All
• DeviceManagementServiceConfig.Read.All

Script's $requiredPermissions (lines 512-549) requires 9 permissions:

• User.Read.All
• Group.Read.All
• Device.Read.All
• DeviceManagementApps.Read.All
• DeviceManagementConfiguration.Read.All
• DeviceManagementManagedDevices.Read.All
• DeviceManagementScripts.Read.All (missing from README)
• CloudPC.Read.All (missing from README)
• DeviceManagementRBAC.Read.All (missing from README)

Additionally, DeviceManagementServiceConfig.Read.All is listed in the README but is not in the script's required permissions array. Users following the README will set up incorrect permissions.

4. Interactive menu section is incomplete

The README's interactive menu section (lines 318-386) is missing:

• Option 10: Compare Groups - exists in the script (line 187) but not in the README menu docs
• Option 11: Show All Failed Assignments - exists in the script (line 188) but not in the README menu docs
• Option 12: Switch Tenant - mentioned in v3.4.5 release notes but not in the README menu docs

---

Suggested changes

1. Add -HTMLReportPath, -ShowFailedAssignments, -IncludeNestedGroups, -ScopeTagFilter to the parameters table
2. Remove -ShowAdminTemplates from the parameters table
3. Update the permissions table to match the script's $requiredPermissions array
4. Add options 10, 11, and 12 to the interactive menu documentation

[ugurkocde]

Analysis & Suggested Fixes

Verified all four discrepancies against the current script (v3.10.0).

---

1. Missing Parameters from README Table (lines 293–316)

The following parameters exist in the script's param() block but are absent from the README:

Parameter	Script Line	Type
-HTMLReportPath	128	[string]
-ShowFailedAssignments	137	[switch]
-IncludeNestedGroups	168	[switch]
-ScopeTagFilter	171	[string]

(-SkipExecution at line 122 is likely intentionally omitted as it's a testing parameter.)

Add these to the parameters table around line 316. Example entries:

| `-HTMLReportPath` | Specifies the output path for the HTML report file | `.\IntuneAssignmentChecker.ps1 -GenerateHTMLReport -HTMLReportPath "C:\Reports\report.html"` |
| `-ShowFailedAssignments` | Show all failed policy assignments | `.\IntuneAssignmentChecker.ps1 -ShowFailedAssignments` |
| `-IncludeNestedGroups` | Include assignments inherited from parent groups | `.\IntuneAssignmentChecker.ps1 -CheckUser -IncludeNestedGroups` |
| `-ScopeTagFilter` | Filter results by scope tag name | `.\IntuneAssignmentChecker.ps1 -ShowAllPolicies -ScopeTagFilter "US-West"` |

---

2. Remove -ShowAdminTemplates from README

Line 307 still lists -ShowAdminTemplates, which was removed from the param() block in v3.4.0. Delete this row from the parameters table.

---

3. Permissions Table Out of Date (lines 107–115)

Script's $requiredPermissions (lines 512–549) — 9 permissions:

Permission	In README?
User.Read.All	Yes
Group.Read.All	Yes
Device.Read.All	Yes
DeviceManagementApps.Read.All	Yes
DeviceManagementConfiguration.Read.All	Yes
DeviceManagementManagedDevices.Read.All	Yes
DeviceManagementScripts.Read.All (line 538)	Missing
CloudPC.Read.All (line 542)	Missing
DeviceManagementRBAC.Read.All (line 546)	Missing

Additionally, DeviceManagementServiceConfig.Read.All is listed in the README but is not in the script's required permissions array — it should be removed.

---

4. Missing Interactive Menu Options (lines 318–386)

The README documents Options 1–9 but is missing three options that exist in the script (lines 1756–1761):

Option	Label	Script Line
10	Compare Assignments Between Groups	1756
11	Show All Failed Assignments	1757
12	Disconnect and Connect to Different Tenant	1761

Add documentation for these three options after the existing Option 9 section, following the same format used for Options 1–9.

[ugurkocde]

@claude

[claude]

Claude encountered an error —— View job

---

I'll analyze this and get back to you.

[ugurkocde]

@claude

[claude]

Claude encountered an error —— View job

---

I'll analyze this and get back to you.

[ugurkocde]

@claude

[claude]

Claude encountered an error —— View job

---

I'll analyze this and get back to you.

[ugurkocde]

@claude

[claude]

Claude encountered an error —— View job

---

I'll analyze this and get back to you.

[ugurkocde]

@claude

[claude]

Claude encountered an error —— View job

---

I'll analyze this and get back to you.

[ugurkocde]

@claude

[claude]

Claude encountered an error —— View job

---

I'll analyze this and get back to you.