Table of Contents

DeviceManagementConfiguration.Read.All

Allows the app to read properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups.

Using the Microsoft Graph APIs to configure Intune controls and policies still requires that the Intune service is correctly licensed by the customer.

These permissions aren't supported for personal Microsoft accounts.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the DeviceManagementConfiguration.Read.All permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category Application Delegated
Identifier dc377aa6-52d8-4e23-b271-2a7ae04cedf3 f1493658-876a-4c87-8fa7-edb559b3476a
DisplayText Read Microsoft Intune device configuration and policies Read Microsoft Intune Device Configuration and Policies
Description Allows the app to read properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups, without a signed-in user. Allows the app to read properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups.
AdminConsentRequired Yes Yes

Graph Methods

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

Methods
GET /deviceAppManagement
GET /deviceAppManagement/enterpriseCodeSigningCertificates
GET /deviceAppManagement/mobileAppCategories
GET /deviceAppManagement/mobileAppCategories/{mobileAppCategoryId}
GET /deviceAppManagement/mobileAppConfigurations
GET /deviceAppManagement/mobileAppConfigurations/{managedDeviceMobileAppConfigurationId}
GET /deviceAppManagement/mobileAppConfigurations/{managedDeviceMobileAppConfigurationId}/assignments
GET /deviceAppManagement/mobileAppConfigurations/{managedDeviceMobileAppConfigurationId}/assignments/{managedDeviceMobileAppConfigurationAssignmentId}
GET /deviceAppManagement/mobileAppConfigurations/{managedDeviceMobileAppConfigurationId}/deviceStatuses
GET /deviceAppManagement/mobileAppConfigurations/{managedDeviceMobileAppConfigurationId}/deviceStatuses/{managedDeviceMobileAppConfigurationDeviceStatusId}
GET /deviceAppManagement/mobileAppConfigurations/{managedDeviceMobileAppConfigurationId}/deviceStatusSummary
GET /deviceAppManagement/mobileAppConfigurations/{managedDeviceMobileAppConfigurationId}/userStatuses
GET /deviceAppManagement/mobileAppConfigurations/{managedDeviceMobileAppConfigurationId}/userStatuses/{managedDeviceMobileAppConfigurationUserStatusId}
GET /deviceAppManagement/mobileAppConfigurations/{managedDeviceMobileAppConfigurationId}/userStatusSummary
GET /deviceAppManagement/mobileAppRelationships
GET /deviceAppManagement/mobileAppRelationships/{mobileAppRelationshipId}
GET /deviceAppManagement/mobileApps
GET /deviceAppManagement/mobileApps/{mobileAppId}
GET /deviceAppManagement/mobileApps/{mobileAppId}/assignments
GET /deviceAppManagement/mobileApps/{mobileAppId}/assignments/{mobileAppAssignmentId}
GET /deviceAppManagement/mobileApps/{mobileAppId}/categories
GET /deviceAppManagement/mobileApps/{mobileAppId}/categories/{mobileAppCategoryId}
GET /deviceAppManagement/mobileApps/{mobileAppId}/contentVersions
GET /deviceAppManagement/mobileApps/{mobileAppId}/contentVersions/{mobileAppContentId}
GET /deviceAppManagement/mobileApps/{mobileAppId}/contentVersions/{mobileAppContentId}/containedApps
GET /deviceAppManagement/mobileApps/{mobileAppId}/contentVersions/{mobileAppContentId}/containedApps/{mobileContainedAppId}
GET /deviceAppManagement/mobileApps/{mobileAppId}/contentVersions/{mobileAppContentId}/files
GET /deviceAppManagement/mobileApps/{mobileAppId}/contentVersions/{mobileAppContentId}/files/{mobileAppContentFileId}
GET /deviceAppManagement/mobileApps/{mobileAppId}/microsoft.graph.managedMobileLobApp/contentVersions
GET /deviceAppManagement/mobileApps/{mobileAppId}/microsoft.graph.managedMobileLobApp/contentVersions/{mobileAppContentId}
GET /deviceAppManagement/mobileApps/{mobileAppId}/microsoft.graph.mobileLobApp/contentVersions
GET /deviceAppManagement/mobileApps/{mobileAppId}/microsoft.graph.mobileLobApp/contentVersions/{mobileAppContentId}
GET /deviceAppManagement/mobileApps/{mobileAppId}/microsoft.graph.windowsUniversalAppX/committedContainedApps
GET /deviceAppManagement/mobileApps/{mobileAppId}/microsoft.graph.windowsUniversalAppX/committedContainedApps/{mobileContainedAppId}
GET /deviceManagement/deviceCompliancePolicies
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/assignments
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/assignments/{deviceCompliancePolicyAssignmentId}
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceSettingStateSummaries
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceSettingStateSummaries/{settingStateDeviceSummaryId}
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceStatuses
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceStatuses/{deviceComplianceDeviceStatusId}
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceStatusOverview
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule/{deviceComplianceScheduledActionForRuleId}
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule/{deviceComplianceScheduledActionForRuleId}/scheduledActionConfigurations
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule/{deviceComplianceScheduledActionForRuleId}/scheduledActionConfigurations/{deviceComplianceActionItemId}
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/userStatuses
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/userStatuses/{deviceComplianceUserStatusId}
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/userStatusOverview
GET /deviceManagement/deviceCompliancePolicyDeviceStateSummary
GET /deviceManagement/deviceCompliancePolicySettingStateSummaries
GET /deviceManagement/deviceCompliancePolicySettingStateSummaries/{deviceCompliancePolicySettingStateSummaryId}
GET /deviceManagement/deviceCompliancePolicySettingStateSummaries/{deviceCompliancePolicySettingStateSummaryId}/deviceComplianceSettingStates
GET /deviceManagement/deviceCompliancePolicySettingStateSummaries/{deviceCompliancePolicySettingStateSummaryId}/deviceComplianceSettingStates/{deviceComplianceSettingStateId}
GET /deviceManagement/deviceConfigurationDeviceStateSummaries
GET /deviceManagement/deviceConfigurations
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/assignments
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/assignments/{deviceConfigurationAssignmentId}
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceSettingStateSummaries
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceSettingStateSummaries/{settingStateDeviceSummaryId}
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceStatuses
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceStatuses/{deviceConfigurationDeviceStatusId}
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceStatusOverview
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/getOmaSettingPlainTextValue
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/userStatuses
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/userStatuses/{deviceConfigurationUserStatusId}
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/userStatusOverview
GET /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}/assignments/{enrollmentConfigurationAssignmentId}
GET /deviceManagement/iosUpdateStatuses
GET /deviceManagement/iosUpdateStatuses/{iosUpdateDeviceStatusId}
GET /deviceManagement/notificationMessageTemplates
GET /deviceManagement/notificationMessageTemplates/{notificationMessageTemplateId}
GET /deviceManagement/notificationMessageTemplates/{notificationMessageTemplateId}/localizedNotificationMessages
GET /deviceManagement/notificationMessageTemplates/{notificationMessageTemplateId}/localizedNotificationMessages/{localizedNotificationMessageId}
GET /deviceManagement/reports
GET /deviceManagement/reports/exportJobs
GET /deviceManagement/reports/exportJobs/{deviceManagementExportJobId}
GET /deviceManagement/softwareUpdateStatusSummary
GET /organization
GET /organization/{organizationId}
GET /reports
GET /reports/deviceConfigurationDeviceActivity
GET /reports/deviceConfigurationUserActivity
GET /users
GET /users/{usersId}
GET /users/{usersId}/exportDeviceAndAppManagementData
POST /deviceAppManagement/mobileApps/{mobileAppId}/enableApplicableArchitectures
POST /deviceManagement/deviceManagementPartners/{deviceManagementPartnerId}/terminate
POST /deviceManagement/reports/getCachedReport
POST /deviceManagement/reports/getCompliancePolicyNonComplianceReport
POST /deviceManagement/reports/getCompliancePolicyNonComplianceSummaryReport
POST /deviceManagement/reports/getComplianceSettingNonComplianceReport
POST /deviceManagement/reports/getConfigurationPolicyNonComplianceReport
POST /deviceManagement/reports/getConfigurationPolicyNonComplianceSummaryReport
POST /deviceManagement/reports/getConfigurationSettingNonComplianceReport
POST /deviceManagement/reports/getDeviceManagementIntentPerSettingContributingProfiles
POST /deviceManagement/reports/getDeviceManagementIntentSettingsReport
POST /deviceManagement/reports/getDeviceNonComplianceReport
POST /deviceManagement/reports/getDevicePoliciesComplianceReport
POST /deviceManagement/reports/getDevicePolicySettingsComplianceReport
POST /deviceManagement/reports/getDevicesStatusByPolicyPlatformComplianceReport
POST /deviceManagement/reports/getDevicesStatusBySettingReport
POST /deviceManagement/reports/getDeviceStatusByCompliacePolicyReport
POST /deviceManagement/reports/getDeviceStatusByCompliancePolicySettingReport
POST /deviceManagement/reports/getDeviceStatusSummaryByCompliacePolicyReport
POST /deviceManagement/reports/getDeviceStatusSummaryByCompliancePolicySettingsReport
POST /deviceManagement/reports/getDevicesWithoutCompliancePolicyReport
POST /deviceManagement/reports/getHistoricalReport
POST /deviceManagement/reports/getNoncompliantDevicesAndSettingsReport
POST /deviceManagement/reports/getPolicyNonComplianceMetadata
POST /deviceManagement/reports/getPolicyNonComplianceReport
POST /deviceManagement/reports/getPolicyNonComplianceSummaryReport
POST /deviceManagement/reports/getReportFilters
POST /deviceManagement/reports/getSettingNonComplianceReport
POST /deviceManagement/windowsAutopilotDeviceIdentities/deleteDevices

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

Graph reference: androidAppConfigurationSchema

Property Type Description
id String Key of the entity the application configuration schema corresponds to
exampleJson Binary UTF8 encoded byte array containing example JSON string conforming to this schema that demonstrates how to set the configuration for this app
schemaItems appConfigurationSchemaItemType collection Collection of items each representing a named configuration option in the schema. It only contains the root-level configuration.
nestedSchemaItems appConfigurationSchemaItemType collection Collection of items each representing a named configuration option in the schema. It contains a flat list of all configuration.