Catalog · Guide
Publish to the catalog
Pick applications and groups that already exist in Intune and Entra, and decide who sees each one and who approves it.
01 Publish an application
An application manager searches the applications that already exist in Intune, picks one and publishes it. Nothing is repackaged. For each application you set a name and description staff will understand, a moderator, the install group that grants it, whether it is for Windows or macOS, and whether it is assigned to a person or to a device.

02 Publish a group
Directory groups are published the same way, so joining a group is a request like any other. A group can be assigned per person or per device, so a device can join the group instead of the person it belongs to.

03 Decide who sees it
Visibility is set per item, to named people or to directory groups, nested groups included. Someone browsing sees what they are eligible for and nothing else.
04 Set the approval steps
Each item carries its own approval chain, or none. An item with no steps is granted the moment someone asks for it. See Build an approval chain.
05 Who can publish
Managers run everything in their area, and moderators look after only the items they moderate. Out of the box, only managers and the root user can add to the catalog. An organization setting lets moderators create applications, and another lets them create groups.