SAB Assign

Privacy Policy

Effective date: April 6, 2026

Overview

SAB Assign is a macOS application for Microsoft Intune administration. It is designed to run primarily on your Mac and to connect directly to Microsoft identity and Microsoft Graph services that you authorize.

Information The App May Process

Depending on how you use the app, SAB Assign may process tenant identifiers, app registration details, Intune resource metadata, group targeting data, assignment filter data, assignment plans, activity logs, and exported evidence files.

How The Information Is Used

The app uses this information to authenticate with Microsoft services, list supported Intune resources, inspect current assignments, build and validate assignment plans, apply or remove assignments through Microsoft Graph, and export evidence for change control.

Local Storage

SAB Assign may store the following locally on your Mac:

  • Tenant ID and Client ID in app settings
  • Client Secret in the macOS Keychain
  • Activity log entries for the current session
  • Evidence exports in folders you choose
  • Mock-mode sample data used for onboarding and testing

Token Handling

OAuth tokens are cached in memory only and are not written to disk. Tokens are refreshed automatically before expiry or reacquired when Microsoft services return an authentication failure.

Network Use

SAB Assign connects directly to Microsoft identity and Microsoft Graph services that you authorize. It may also open website links when you choose to use support or privacy resources from the app.

Sandbox and Platform Access

The app is designed for outgoing network access and user-selected file access for evidence export. It is not built to access camera, microphone, Bluetooth, contacts, calendars, location, or USB as part of its normal workflow.

Developer Data Collection

The app is not built around third-party advertising, cross-app tracking, or developer-hosted analytics collection for its core functionality. Tenant data and exported evidence remain on your Mac unless you explicitly choose to share them.

Support Communications

If you contact support, you may choose to send screenshots, logs, or exported evidence manually. You control what you send and should review it first.

Your Choices

  • Use mock mode without touching your tenant
  • Delete evidence exports at any time from locations you chose
  • Clear the saved Entra profile and associated Keychain secret
  • Use Magic Offboard to remove the app registration when no longer needed
  • Contact support or privacy email for questions