Table of Contents

DeviceManagementConfiguration.ReadWrite.All

Allows the app to read and write properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups.

Using the Microsoft Graph APIs to configure Intune controls and policies still requires that the Intune service is correctly licensed by the customer.

These permissions aren't supported for personal Microsoft accounts.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the DeviceManagementConfiguration.ReadWrite.All permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category Application Delegated
Identifier 9241abd9-d0e6-425a-bd4f-47ba86e767a4 0883f392-0a7a-443d-8c76-16a6d39c7b63
DisplayText Read and write Microsoft Intune device configuration and policies Read and write Microsoft Intune Device Configuration and Policies
Description Allows the app to read and write properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups, without a signed-in user. Allows the app to read and write properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups.
AdminConsentRequired Yes Yes

Graph Methods

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

Methods
DELETE /deviceAppManagement/vppTokens/{vppTokenId}
DELETE /deviceManagement/complianceManagementPartners/{complianceManagementPartnerId}
DELETE /deviceManagement/deviceCategories/{deviceCategoryId}
DELETE /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}
DELETE /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/assignments/{deviceCompliancePolicyAssignmentId}
DELETE /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceSettingStateSummaries/{settingStateDeviceSummaryId}
DELETE /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceStatuses/{deviceComplianceDeviceStatusId}
DELETE /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule/{deviceComplianceScheduledActionForRuleId}
DELETE /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule/{deviceComplianceScheduledActionForRuleId}/scheduledActionConfigurations/{deviceComplianceActionItemId}
DELETE /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/userStatuses/{deviceComplianceUserStatusId}
DELETE /deviceManagement/deviceCompliancePolicySettingStateSummaries/{deviceCompliancePolicySettingStateSummaryId}
DELETE /deviceManagement/deviceCompliancePolicySettingStateSummaries/{deviceCompliancePolicySettingStateSummaryId}/deviceComplianceSettingStates/{deviceComplianceSettingStateId}
DELETE /deviceManagement/deviceConfigurations/{deviceConfigurationId}
DELETE /deviceManagement/deviceConfigurations/{deviceConfigurationId}/assignments/{deviceConfigurationAssignmentId}
DELETE /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceSettingStateSummaries/{settingStateDeviceSummaryId}
DELETE /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceStatuses/{deviceConfigurationDeviceStatusId}
DELETE /deviceManagement/deviceConfigurations/{deviceConfigurationId}/userStatuses/{deviceConfigurationUserStatusId}
DELETE /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}
DELETE /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}/assignments/{enrollmentConfigurationAssignmentId}
DELETE /deviceManagement/deviceManagementPartners/{deviceManagementPartnerId}
DELETE /deviceManagement/exchangeConnectors/{deviceManagementExchangeConnectorId}
DELETE /deviceManagement/iosUpdateStatuses/{iosUpdateDeviceStatusId}
DELETE /deviceManagement/mobileThreatDefenseConnectors/{mobileThreatDefenseConnectorId}
DELETE /deviceManagement/reports/exportJobs/{deviceManagementExportJobId}
DELETE /users/{usersId}
GET /deviceAppManagement
GET /deviceAppManagement/vppTokens
GET /deviceAppManagement/vppTokens/{vppTokenId}
GET /deviceManagement
GET /deviceManagement/complianceManagementPartners
GET /deviceManagement/complianceManagementPartners/{complianceManagementPartnerId}
GET /deviceManagement/conditionalAccessSettings
GET /deviceManagement/deviceCategories
GET /deviceManagement/deviceCategories/{deviceCategoryId}
GET /deviceManagement/deviceCompliancePolicies
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/assignments
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/assignments/{deviceCompliancePolicyAssignmentId}
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceSettingStateSummaries
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceSettingStateSummaries/{settingStateDeviceSummaryId}
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceStatuses
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceStatuses/{deviceComplianceDeviceStatusId}
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceStatusOverview
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule/{deviceComplianceScheduledActionForRuleId}
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule/{deviceComplianceScheduledActionForRuleId}/scheduledActionConfigurations
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule/{deviceComplianceScheduledActionForRuleId}/scheduledActionConfigurations/{deviceComplianceActionItemId}
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/userStatuses
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/userStatuses/{deviceComplianceUserStatusId}
GET /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/userStatusOverview
GET /deviceManagement/deviceCompliancePolicyDeviceStateSummary
GET /deviceManagement/deviceCompliancePolicySettingStateSummaries
GET /deviceManagement/deviceCompliancePolicySettingStateSummaries/{deviceCompliancePolicySettingStateSummaryId}
GET /deviceManagement/deviceCompliancePolicySettingStateSummaries/{deviceCompliancePolicySettingStateSummaryId}/deviceComplianceSettingStates
GET /deviceManagement/deviceCompliancePolicySettingStateSummaries/{deviceCompliancePolicySettingStateSummaryId}/deviceComplianceSettingStates/{deviceComplianceSettingStateId}
GET /deviceManagement/deviceConfigurationDeviceStateSummaries
GET /deviceManagement/deviceConfigurations
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/assignments
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/assignments/{deviceConfigurationAssignmentId}
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceSettingStateSummaries
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceSettingStateSummaries/{settingStateDeviceSummaryId}
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceStatuses
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceStatuses/{deviceConfigurationDeviceStatusId}
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceStatusOverview
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/getOmaSettingPlainTextValue
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/userStatuses
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/userStatuses/{deviceConfigurationUserStatusId}
GET /deviceManagement/deviceConfigurations/{deviceConfigurationId}/userStatusOverview
GET /deviceManagement/deviceEnrollmentConfigurations
GET /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}
GET /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}/assignments
GET /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}/assignments/{enrollmentConfigurationAssignmentId}
GET /deviceManagement/deviceManagementPartners
GET /deviceManagement/deviceManagementPartners/{deviceManagementPartnerId}
GET /deviceManagement/exchangeConnectors
GET /deviceManagement/exchangeConnectors/{deviceManagementExchangeConnectorId}
GET /deviceManagement/iosUpdateStatuses
GET /deviceManagement/iosUpdateStatuses/{iosUpdateDeviceStatusId}
GET /deviceManagement/mobileThreatDefenseConnectors
GET /deviceManagement/mobileThreatDefenseConnectors/{mobileThreatDefenseConnectorId}
GET /deviceManagement/reports
GET /deviceManagement/reports/exportJobs
GET /deviceManagement/reports/exportJobs/{deviceManagementExportJobId}
GET /deviceManagement/softwareUpdateStatusSummary
GET /deviceManagement/verifyWindowsEnrollmentAutoDiscovery
GET /organization
GET /organization/{organizationId}
GET /reports
GET /users
GET /users/{usersId}
GET /users/{usersId}/exportDeviceAndAppManagementData
PATCH /deviceAppManagement
PATCH /deviceAppManagement/vppTokens/{vppTokenId}
PATCH /deviceManagement
PATCH /deviceManagement/complianceManagementPartners/{complianceManagementPartnerId}
PATCH /deviceManagement/conditionalAccessSettings
PATCH /deviceManagement/deviceCategories/{deviceCategoryId}
PATCH /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}
PATCH /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/assignments/{deviceCompliancePolicyAssignmentId}
PATCH /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceSettingStateSummaries/{settingStateDeviceSummaryId}
PATCH /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceStatuses/{deviceComplianceDeviceStatusId}
PATCH /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceStatusOverview
PATCH /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule/{deviceComplianceScheduledActionForRuleId}
PATCH /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule/{deviceComplianceScheduledActionForRuleId}/scheduledActionConfigurations/{deviceComplianceActionItemId}
PATCH /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/userStatuses/{deviceComplianceUserStatusId}
PATCH /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/userStatusOverview
PATCH /deviceManagement/deviceCompliancePolicyDeviceStateSummary
PATCH /deviceManagement/deviceCompliancePolicySettingStateSummaries/{deviceCompliancePolicySettingStateSummaryId}
PATCH /deviceManagement/deviceCompliancePolicySettingStateSummaries/{deviceCompliancePolicySettingStateSummaryId}/deviceComplianceSettingStates/{deviceComplianceSettingStateId}
PATCH /deviceManagement/deviceConfigurationDeviceStateSummaries
PATCH /deviceManagement/deviceConfigurations/{deviceConfigurationId}
PATCH /deviceManagement/deviceConfigurations/{deviceConfigurationId}/assignments/{deviceConfigurationAssignmentId}
PATCH /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceSettingStateSummaries/{settingStateDeviceSummaryId}
PATCH /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceStatuses/{deviceConfigurationDeviceStatusId}
PATCH /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceStatusOverview
PATCH /deviceManagement/deviceConfigurations/{deviceConfigurationId}/userStatuses/{deviceConfigurationUserStatusId}
PATCH /deviceManagement/deviceConfigurations/{deviceConfigurationId}/userStatusOverview
PATCH /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}
PATCH /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}/assignments/{enrollmentConfigurationAssignmentId}
PATCH /deviceManagement/deviceManagementPartners/{deviceManagementPartnerId}
PATCH /deviceManagement/exchangeConnectors/{deviceManagementExchangeConnectorId}
PATCH /deviceManagement/iosUpdateStatuses/{iosUpdateDeviceStatusId}
PATCH /deviceManagement/mobileThreatDefenseConnectors/{mobileThreatDefenseConnectorId}
PATCH /deviceManagement/reports
PATCH /deviceManagement/reports/exportJobs/{deviceManagementExportJobId}
PATCH /deviceManagement/softwareUpdateStatusSummary
PATCH /organization/{organizationId}
PATCH /reports
PATCH /users/{usersId}
POST /deviceAppManagement/syncMicrosoftStoreForBusinessApps
POST /deviceAppManagement/vppTokens
POST /deviceAppManagement/vppTokens/{vppTokenId}/syncLicenses
POST /deviceManagement/complianceManagementPartners
POST /deviceManagement/deviceCategories
POST /deviceManagement/deviceCompliancePolicies
POST /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/assign
POST /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/assignments
POST /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceSettingStateSummaries
POST /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/deviceStatuses
POST /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduleActionsForRules
POST /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule
POST /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/scheduledActionsForRule/{deviceComplianceScheduledActionForRuleId}/scheduledActionConfigurations
POST /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicyId}/userStatuses
POST /deviceManagement/deviceCompliancePolicySettingStateSummaries
POST /deviceManagement/deviceCompliancePolicySettingStateSummaries/{deviceCompliancePolicySettingStateSummaryId}/deviceComplianceSettingStates
POST /deviceManagement/deviceConfigurations
POST /deviceManagement/deviceConfigurations/{deviceConfigurationId}/assign
POST /deviceManagement/deviceConfigurations/{deviceConfigurationId}/assignments
POST /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceSettingStateSummaries
POST /deviceManagement/deviceConfigurations/{deviceConfigurationId}/deviceStatuses
POST /deviceManagement/deviceConfigurations/{deviceConfigurationId}/userStatuses
POST /deviceManagement/deviceEnrollmentConfigurations
POST /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}/assign
POST /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}/assignments
POST /deviceManagement/deviceEnrollmentConfigurations/{deviceEnrollmentConfigurationId}/setPriority
POST /deviceManagement/deviceManagementPartners
POST /deviceManagement/exchangeConnectors
POST /deviceManagement/exchangeConnectors/{deviceManagementExchangeConnectorId}/sync
POST /deviceManagement/iosUpdateStatuses
POST /deviceManagement/mobileThreatDefenseConnectors
POST /deviceManagement/reports/exportJobs
POST /deviceManagement/reports/getCachedReport
POST /deviceManagement/reports/getCompliancePolicyNonComplianceReport
POST /deviceManagement/reports/getCompliancePolicyNonComplianceSummaryReport
POST /deviceManagement/reports/getComplianceSettingNonComplianceReport
POST /deviceManagement/reports/getConfigurationPolicyNonComplianceReport
POST /deviceManagement/reports/getConfigurationPolicyNonComplianceSummaryReport
POST /deviceManagement/reports/getConfigurationSettingNonComplianceReport
POST /deviceManagement/reports/getDeviceManagementIntentPerSettingContributingProfiles
POST /deviceManagement/reports/getDeviceManagementIntentSettingsReport
POST /deviceManagement/reports/getDeviceNonComplianceReport
POST /deviceManagement/reports/getDevicePoliciesComplianceReport
POST /deviceManagement/reports/getDevicePolicySettingsComplianceReport
POST /deviceManagement/reports/getDevicesStatusByPolicyPlatformComplianceReport
POST /deviceManagement/reports/getDevicesStatusBySettingReport
POST /deviceManagement/reports/getDeviceStatusByCompliacePolicyReport
POST /deviceManagement/reports/getDeviceStatusByCompliancePolicySettingReport
POST /deviceManagement/reports/getDeviceStatusSummaryByCompliacePolicyReport
POST /deviceManagement/reports/getDeviceStatusSummaryByCompliancePolicySettingsReport
POST /deviceManagement/reports/getDevicesWithoutCompliancePolicyReport
POST /deviceManagement/reports/getHistoricalReport
POST /deviceManagement/reports/getNoncompliantDevicesAndSettingsReport
POST /deviceManagement/reports/getPolicyNonComplianceMetadata
POST /deviceManagement/reports/getPolicyNonComplianceReport
POST /deviceManagement/reports/getPolicyNonComplianceSummaryReport
POST /deviceManagement/reports/getReportFilters
POST /deviceManagement/reports/getSettingNonComplianceReport
POST /organization/{organizationId}/setMobileDeviceManagementAuthority
POST /users

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

Graph reference: intune-androidforwork-androiddeviceownerenrollmentmode