I changed something and nothing happened.

Check which side caches. Passbeam applies most changes at the next authentication, such as removing a group from the allowed list, a suspension or a VLAN rule. If the device hasn't tried to connect since, nothing has changed yet.

Intune is slower. A device sync doesn't fetch platform scripts, because the Intune Management Extension checks in on its own schedule. Restarting that service on the device makes it check straight away.

Apple devices cache the enrolment URL from their profile. If an enrolment address has changed, push the profile again, or the device keeps using the old one.