Simple PowerShell Backup
Install the script and export your entire Intune configuration with just two commands. All policies, profiles, and apps backed up to JSON files instantly.
Community Edition
See the portal in action
Whether you're a solo IT admin or managing multiple tenants, we've got you covered. Pick what works best for you!
Not sure which to choose? Start with the PowerShell script — you can always upgrade later!
Your data NEVER leaves your Azure tenant. Whether you choose PowerShell or our Cloud Portal, all backups stay in YOUR storage account, under YOUR control.
TenuVault Cloud Portal is a SaaS solution that orchestrates your backups, but all your Intune data remains in YOUR Azure environment. Nobody besides you can store, process, or access your backup data.
All backups are stored in YOUR Azure Storage Account. You have complete control and ownership.
Backup jobs run in YOUR Azure Automation Account. No external access to your environment.
Uses YOUR Azure App Registration. Nobody besides you stores credentials or has direct access.
This is the most secure architecture possible - your sensitive Intune configurations never leave your control.
TenuVault Portal orchestrates backups while all data remains in your Azure tenant
Manages backups via web interface
Orchestrates backup operations
Runs backup jobs
Stores all backups
All data stays in your Azure
No external access to your data
Your resources, your rules
One PowerShell command installs TenuVault. Connect to your Microsoft Graph and you're ready to roll.
Install-Script -Name TenuVault
Just type 'TenuVault' to launch the interactive menu. Backup all your Intune configs - policies, profiles, apps - everything gets saved as clean JSON.
TenuVault
Everything you need to know about TenuVault and how it can help protect your Intune configurations.
Yes! TenuVault is 100% free. Both the PowerShell script and the cloud portal are available at no cost. There are no hidden fees, no premium tiers, and no limitations on functionality.
TenuVault backs up all your Intune configurations including device compliance policies, configuration profiles, app protection policies, app configuration policies, enrollment restrictions, and more. It captures the complete configuration as JSON files.
Yes, you'll need appropriate Microsoft Graph API permissions to read and write Intune configurations. Typically, this means having Intune Administrator or Global Administrator roles, or custom roles with the necessary Graph API permissions.
Yes! We welcome contributions from the community. Whether it's code improvements, documentation, bug reports, or feature requests, you can contribute through our GitHub repository. Join our growing community of IT professionals making Intune backup better for everyone.
Still have questions? Ask on GitHub