Intune Policy Strip Unique Identifiers. Strip IntuneManagement UUIDs

assign_to_devicegroup.ps1

# It should really be a dynamic group but if hindsight was foresight we would all be millionaires
# POST https://graph.microsoft.com/beta/deviceManagement/configurationPolicies/{policyId}/assign
$policyId = "{policyId}"
$groupId  = "{groupId}"
$body = @{
    assignments = @(
        @{
            "@odata.type" = "#microsoft.graph.deviceManagementConfigurationPolicyAssignment"
            target        = @{
                "@odata.type" = "#microsoft.graph.groupAssignmentTarget"
                groupId       = $groupId
            }
        }
    )
}
Invoke-MgGraphRequest -Method POST -Uri "/deviceManagement/configurationPolicies/$policyId/assign" `-Body ($body | ConvertTo-Json -Depth 6)

intune_stripper.ps1

$policy = Get-Content '.\export.json' | ConvertFrom-Json

$clean = [ordered]@{
  '@odata.type'     = '#microsoft.graph.deviceManagementConfigurationPolicy'
  name              = $policy.name
  description       = $policy.description
  platforms         = $policy.platforms
  technologies      = $policy.technologies
  roleScopeTagIds   = @('0')
  settings          = @()
  templateReference = $policy.templateReference
}

foreach($s in $policy.settings) {
    $inst               = $s.settingInstance
    $inst.PSObject.Properties.Remove('@odata.id')
    $inst.PSObject.Properties.Remove('@odata.editLink')
    $inst.PSObject.Properties.Remove('id')
    $clean.settings    += [ordered]@{
        '@odata.type'  = '#microsoft.graph.deviceManagementConfigurationSetting'
        settingInstance = $inst
    }
}
$clean | ConvertTo-Json -Depth 10