Can there be a feature in the MEMAC portal so that when you click on a Group in the Groups section (from Azure AD), there is a section to show all the Apps/Policies etc that are assigned to that group?

It would be really useful

Troubleshooting Intune is frustrating because admins can't see what is happening in the cloud. It would be easier if we could see detailed logs.

Sometimes it is quite handy to have the option to push configuration/profile manually to selected devices (would be quite helpfull during issue - https://blogs.technet.microsoft.com/intunesupport/2018/09/15/known-issue-certificate-based-authentication-issue-with-pulse-secure-7-0-0-for-ios/ ).
Other MDM solutions has that option, but with Intune you have to re-enroll device instead, or fake profile change to push it to all devices.

It would be very helpful to be able to download the applications, certificates etc which are uploaded to Intune. I don't think much more words are needed in this case, and all of us can think of many reasons why you would like to inspect deployed applications, certificates, XML's etc. before the actual deployment. In this case a certain MSI is giving issues suddenly, being able to download said MSI would help a lot in the troubleshooting and fixing process.

It would be great and very helpful to be able to collect the "Company Portal log files" remotely, i.e. e.g. being able to trigger the device from the ConfigMgr console (Intune Hybrid) to send the company portal log files. In case of troubleshooting (e.g. as part of a MS support case) is often difficult to get such log files and having to ask the end users to mail them is not a nice solution. Additionally, it would be nice if the company portal log files can be extended with more helpful information.

In SCCM you are able to right click a client and view their application, security, and system logs easily. Would like to be able to have InTune pull the log files and display or allow to download for viewing. Currently my clients have to keep local server so once can RDP locally then pull up the windows event viewer.

When I run into an issue with an application on a device there is no easy way on that device to view logs without installing an app and that device coming back to me as an administrator to troubleshoot.
It would be great if there was a way to enable logging on a mobile device and capture log data to Intune to see the cause of an app failure or crash.

Within the new Intune app you can only send the Device Logs to Microsoft. It would be more efficient to have the option to also send the Device Logs to local IT admin for analysis.

For the Intune Diagnostic Data that can send operationalLogs to Log Analytics can the export contain data instead of guids. For example, it contains AADDeviceID, InTuneUserID, MessageID, would like it to contain devicename, username, etc. This will allow us to create meaningful Azure Monitor Alerts.

At the moment we only have information about user who is trying to enrol device and faces any issues, but it will be good to have also information about device.
Like having device serial number will help to delete previously not enrolled device without contacting user

Instead of relying on other remote connectivity software to pull logs from remote devices directly. This would allow improved and speedier diagnosis of any errors.

Being able to see the policies applied to a device and not just the last synch time would be very helpful from a testing standpoint and allow one to not spend time wondering whether or not the newly created policy was actually synched.

When a user report a problem, you have to ask the user to extract the logfiles and send it to you or you need a remote session.
When you manage a PC remote, you don't want to bother the user withe this kind of things. So it would be great, toreadthe logfiles from within Intune. Intune is already getting the telemetry of the devices.

Would be awesome if one could do remote PowerShell through the Intune Management Extension from Endpoint Manager portal. We use this functionality a lot with our RMM tool ConnectWise Automate. But why not have this built-in?