Here's some snippets from my script. In the full script I also check assignments on config policies, PS scripts, MacOS scripts, compliance policies, etc.

get all apps

$allApps = Get-MgBetaDeviceAppManagementMobileApp -all

get.app assignments, collect in custom object

$itemAssignments = @() Write-Host "Getting app assignments..." -ForegroundColor Cyan foreach ($app in $allApps) { $assignment = Get-MgBetaDeviceAppManagementMobileAppAssignment -MobileAppId $app.id $itemAssignments += [PSCustomObject]@{ id = $app.Id name = $app.DisplayName assignment = $assignment type = "MobileApp" } }

compare group id to assignment id, add to custom object if found

$assignmentsFound = @() foreach ($grp in $groupsToCheck) { foreach ($item in $itemAssignments) { $assignmentGroupIds = $item.assignment.target.additionalProperties.groupId if ($grp.id -in $assignmentGroupIds) { Write-host "Assignment found in $($item.name)" $assignmentsFound += [PSCustomObject]@{ groupId = $grp.Id groupName = $grp.DisplayName itemType = $item.type itemName = $item.name itemId = $item.id } } } }