Table of Contents

DeviceManagementConfiguration.Read.All

Allows the app to read properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups.

Using the Microsoft Graph APIs to configure Intune controls and policies still requires that the Intune service is correctly licensed by the customer.

These permissions aren't supported for personal Microsoft accounts.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the DeviceManagementConfiguration.Read.All permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category Application Delegated
Identifier dc377aa6-52d8-4e23-b271-2a7ae04cedf3 f1493658-876a-4c87-8fa7-edb559b3476a
DisplayText Read Microsoft Intune device configuration and policies Read Microsoft Intune Device Configuration and Policies
Description Allows the app to read properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups, without a signed-in user. Allows the app to read properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups.
AdminConsentRequired Yes Yes

Graph Methods

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

Methods
GET /deviceAppManagement
GET /deviceAppManagement/vppTokens
GET /deviceAppManagement/vppTokens/{vppTokenId}
GET /deviceManagement
GET /deviceManagement/complianceManagementPartners
GET /deviceManagement/complianceManagementPartners/{complianceManagementPartnerId}
GET /deviceManagement/conditionalAccessSettings
GET /deviceManagement/deviceCategories
GET /deviceManagement/deviceCategories/{deviceCategoryId}
GET /deviceManagement/deviceCompliancePolicies
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/assignments
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/assignments/{deviceCompliancePolicyAssignmentId}
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceSettingStateSummaries
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceSettingStateSummaries/{settingStateDeviceSummaryId}
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceStatuses
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceStatuses/{deviceComplianceDeviceStatusId}
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceStatusOverview
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule/{deviceComplianceScheduledActionForRuleId}
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule/{deviceComplianceScheduledActionForRuleId}/scheduledActionConfigurations
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule/{deviceComplianceScheduledActionForRuleId}/scheduledActionConfigurations/{deviceComplianceActionItemId}
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/userStatuses
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/userStatuses/{deviceComplianceUserStatusId}
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/userStatusOverview
GET /deviceManagement/deviceCompliancePolicyDeviceStateSummary
GET /deviceManagement/deviceCompliancePolicySettingStateSummaries
GET /deviceManagement/deviceCompliancePolicySettingStateSummaries/{deviceCompliancePolicySettingStateSummaryId}
GET /deviceManagement/deviceCompliancePolicySettingStateSummaries/{deviceCompliancePolicySettingStateSummaryId}/deviceComplianceSettingStates
GET /deviceManagement/deviceCompliancePolicySettingStateSummaries/{deviceCompliancePolicySettingStateSummaryId}/deviceComplianceSettingStates/{deviceComplianceSettingStateId}
GET /deviceManagement/deviceConfigurationDeviceStateSummaries
GET /deviceManagement/deviceConfigurations
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/assignments
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/assignments/{deviceConfigurationAssignmentId}
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceSettingStateSummaries
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceSettingStateSummaries/{settingStateDeviceSummaryId}
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceStatuses
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceStatuses/{deviceConfigurationDeviceStatusId}
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceStatusOverview
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/userStatuses
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/userStatuses/{deviceConfigurationUserStatusId}
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/userStatusOverview
GET /deviceManagement/deviceEnrollmentConfigurations
GET /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}
GET /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}/assignments
GET /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}/assignments/{enrollmentConfigurationAssignmentId}
GET /deviceManagement/deviceManagementPartners
GET /deviceManagement/deviceManagementPartners/{deviceManagementPartnerId}
GET /deviceManagement/exchangeConnectors
GET /deviceManagement/exchangeConnectors/{deviceManagementExchangeConnectorId}
GET /deviceManagement/iosUpdateStatuses
GET /deviceManagement/iosUpdateStatuses/{iosUpdateDeviceStatusId}
GET /deviceManagement/mobileThreatDefenseConnectors
GET /deviceManagement/mobileThreatDefenseConnectors/{mobileThreatDefenseConnectorId}
GET /deviceManagement/reports
GET /deviceManagement/reports/exportJobs
GET /deviceManagement/reports/exportJobs/{deviceManagementExportJobId}
GET /deviceManagement/softwareUpdateStatusSummary
GET /organization
GET /organization/{organizationId}
GET /reports
GET /reports/deviceConfigurationDeviceActivity
GET /reports/deviceConfigurationUserActivity
GET /users
GET /users/{usersId}
GET /users/{usersId}/exportDeviceAndAppManagementData
POST /deviceManagement/deviceManagementPartners/{deviceManagementPartnerId}/terminate
POST /deviceManagement/reports/getCachedReport
POST /deviceManagement/reports/getCompliancePolicyNonComplianceReport
POST /deviceManagement/reports/getCompliancePolicyNonComplianceSummaryReport
POST /deviceManagement/reports/getComplianceSettingNonComplianceReport
POST /deviceManagement/reports/getConfigurationPolicyNonComplianceReport
POST /deviceManagement/reports/getConfigurationPolicyNonComplianceSummaryReport
POST /deviceManagement/reports/getConfigurationSettingNonComplianceReport
POST /deviceManagement/reports/getDeviceManagementIntentPerSettingContributingProfiles
POST /deviceManagement/reports/getDeviceManagementIntentSettingsReport
POST /deviceManagement/reports/getDeviceNonComplianceReport
POST /deviceManagement/reports/getDevicePoliciesComplianceReport
POST /deviceManagement/reports/getDevicePolicySettingsComplianceReport
POST /deviceManagement/reports/getDevicesStatusByPolicyPlatformComplianceReport
POST /deviceManagement/reports/getDevicesStatusBySettingReport
POST /deviceManagement/reports/getDeviceStatusByCompliacePolicyReport
POST /deviceManagement/reports/getDeviceStatusByCompliancePolicySettingReport
POST /deviceManagement/reports/getDeviceStatusSummaryByCompliacePolicyReport
POST /deviceManagement/reports/getDeviceStatusSummaryByCompliancePolicySettingsReport
POST /deviceManagement/reports/getDevicesWithoutCompliancePolicyReport
POST /deviceManagement/reports/getHistoricalReport
POST /deviceManagement/reports/getNoncompliantDevicesAndSettingsReport
POST /deviceManagement/reports/getPolicyNonComplianceMetadata
POST /deviceManagement/reports/getPolicyNonComplianceReport
POST /deviceManagement/reports/getPolicyNonComplianceSummaryReport
POST /deviceManagement/reports/getReportFilters
POST /deviceManagement/reports/getSettingNonComplianceReport

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

Graph reference: androidDeviceOwnerEnrollmentProfile

Property Type Description
accountId String Tenant GUID the enrollment profile belongs to.
id String Unique GUID for the enrollment profile.
displayName String Display name for the enrollment profile.
description String Description for the enrollment profile.
enrollmentMode androidDeviceOwnerEnrollmentMode The enrollment mode of devices that use this enrollment profile. Possible values are: corporateOwnedDedicatedDevice, corporateOwnedFullyManaged, corporateOwnedWorkProfile, corporateOwnedAOSPUserlessDevice, corporateOwnedAOSPUserAssociatedDevice.
enrollmentTokenType androidDeviceOwnerEnrollmentTokenType The enrollment token type for an enrollment profile. Possible values are: default, corporateOwnedDedicatedDeviceWithAzureADSharedMode, deviceStaging.
createdDateTime DateTimeOffset Date time the enrollment profile was created.
lastModifiedDateTime DateTimeOffset Date time the enrollment profile was last modified.
tokenValue String Value of the most recently created token for this enrollment profile.
tokenCreationDateTime DateTimeOffset Date time the most recently created token was created.
tokenExpirationDateTime DateTimeOffset Date time the most recently created token will expire.
enrolledDeviceCount Int32 Total number of Android devices that have enrolled using this enrollment profile.
enrollmentTokenUsageCount Int32 Total number of AOSP devices that have enrolled using the current token. Valid values 0 to 20000
qrCodeContent String String used to generate a QR code for the token.
qrCodeImage mimeContent String used to generate a QR code for the token.
roleScopeTagIds String collection List of Scope Tags for this Entity instance.
configureWifi Boolean Boolean that indicates that the Wi-Fi network should be configured during device provisioning. When set to TRUE, device provisioning will use Wi-Fi related properties to automatically connect to Wi-Fi networks. When set to FALSE or undefined, other Wi-Fi related properties will be ignored. Default value is TRUE. Returned by default.
wifiSsid String String that contains the wi-fi login ssid
wifiPassword String String that contains the wi-fi login password
wifiSecurityType aospWifiSecurityType String that contains the wi-fi security type. Possible values are: none, wpa, wep.
wifiHidden Boolean Boolean that indicates if hidden wifi networks are enabled
isTeamsDeviceProfile Boolean Boolean indicating if this profile is an Android AOSP for Teams device profile.
deviceNameTemplate String Indicates the device name template used for the enrolled Android devices. The maximum length allowed for this property is 63 characters. The template expression contains normal text and tokens, including the serial number of the device, user name, device type, upn prefix, or a randomly generated number. Supported Tokens for device name templates are: (for device naming template expression): {{SERIAL}}, {{SERIALLAST4DIGITS}}, {{ENROLLMENTDATETIME}}, {{USERNAME}}, {{DEVICETYPE}}, {{UPNPREFIX}}, {{rand:x}}. Supports: $select, $top, $skip. $Search, $orderBy and $filter are not supported.