Microsoft Intune MCP connector

• List List all Microsoft Intune managed devices List managed devices enrolled in Microsoft Intune. Returns: @odata.type, id, userId, deviceName, managedDeviceOwnerType, deviceActionResults, managementState, enrolledDateTime, lastSyncDateTime, operatingSystem, complianceState, jailBroken, managementAgent, osVersion, easActivated, easDeviceId, easActivationDateTime, azureADRegistered, deviceEnrollmentType, activationLockBypassCode, emailAddress,…
• Get Get single Microsoft Intune managed device by ID Get a single managed device by id in Microsoft Intune. Returns: @odata.type, id, userId, deviceName, managedDeviceOwnerType, deviceActionResults, managementState, enrolledDateTime, lastSyncDateTime, operatingSystem, complianceState, jailBroken, managementAgent, osVersion, easActivated, easDeviceId, easActivationDateTime, azureADRegistered, deviceEnrollmentType, activationLockBypassCode,…
• Create Create a Microsoft Intune managed device Create a new managed device in Microsoft Intune. Returns: @odata.type, id, userId, deviceName, managedDeviceOwnerType, deviceActionResults, managementState, enrolledDateTime, lastSyncDateTime, operatingSystem, complianceState, jailBroken, managementAgent, osVersion, easActivated, easDeviceId, easActivationDateTime, azureADRegistered, deviceEnrollmentType, activationLockBypassCode, emailAddress,…
• Delete Delete a Microsoft Intune managed device by ID Delete a managed device in Microsoft Intune by id. Returns an empty 204 response on success. Required: id. The API requires an active Intune license for the tenant.
• Update Update a Microsoft Intune managed device by ID Update a managed device's properties in Microsoft Intune. Returns the updated managedDevice object including id, deviceName, managedDeviceOwnerType, complianceState, operatingSystem, osVersion, enrolledDateTime, and lastSyncDateTime. Required: id. Requires an active Intune license for the tenant.
• Action Microsoft Intune managed devices retire Retire a managed device in Microsoft Intune by initiating a retire action on the specified device. Returns an empty 204 response on success. Required: managed_device_id.
• Action Microsoft Intune managed devices wipe Wipe a managed device in Microsoft Intune, optionally preserving enrollment data, user data, and eSIM data plan. Returns an empty 204 response on success. Required: managed_device_id. Optional body parameters control retention of enrollment data, user data, eSIM plans, Mac unlock code, and obliteration behavior.
• Action Microsoft Intune managed devices reset passcode Reset the passcode on a managed device in Microsoft Intune by initiating a resetPasscode action on the specified device. Returns an empty 204 response on success. Required: managed_device_id.
• Action Microsoft Intune managed devices remote lock Remotely lock a managed device in msintune. Returns an empty 204 response on success. Required: managed_device_id.
• Action Microsoft Intune managed devices request remote assistance Request remote assistance for a managed device in msintune. Returns an empty 204 response on success. Required: managed_device_id.
• Disable Microsoft Intune managed devices disable lost mode Disable lost mode on a managed Intune device. Returns an empty 204 response on success. Required: managed_device_id.
• Action Microsoft Intune managed devices locate device Locate a managed Intune device, triggering a request for the device to report its location. Returns an empty 204 response on success. Required: managed_device_id.
• Action Microsoft Intune managed devices bypass activation lock Bypass the activation lock on a managed Intune device. Returns an empty 204 response on success. Required: managed_device_id.
• Action Microsoft Intune managed devices reboot now Reboot a managed Intune device immediately. Returns an empty 204 response on success. Required: managed_device_id.
• Action Microsoft Intune managed devices shut down Shut down a managed Intune device. Returns an empty 204 response on success. Required: managed_device_id.
• Action Microsoft Intune managed devices recover passcode Recover the passcode of a managed device in Microsoft Intune. Returns an empty 204 response on success. Required: managed_device_id.
• Action Microsoft Intune managed devices clean windows device Clean a Windows managed device in Microsoft Intune, specifying whether to preserve user data. Returns an empty 204 response on success. Required: managed_device_id.
• Action Microsoft Intune managed devices logout shared apple device active user Log out the active user from a shared Apple managed device in Microsoft Intune. Returns an empty 204 response on success. Required: managed_device_id.
• Delete Microsoft Intune managed devices delete user from shared apple device Delete a specific user from a shared Apple managed device in Microsoft Intune by user principal name. Returns an empty 204 response on success. Required: managed_device_id.
• Sync Microsoft Intune managed devices sync device Trigger a device sync for a managed device in Microsoft Intune. Returns an empty 204 response on success. Required: managed_device_id.
• Action Microsoft Intune managed devices windows defender scan Trigger a Windows Defender scan on a managed device in Microsoft Intune. Pass quickScan as true for a quick scan or false for a full scan. Returns an empty 204 response on success. Required: managed_device_id.
• Update Microsoft Intune managed devices windows defender update signatures Trigger a Windows Defender signature update on a managed device in Microsoft Intune. Returns an empty 204 response on success. Required: managed_device_id.
• Update Microsoft Intune managed devices update windows device account Update the Windows device account on a managed device in Microsoft Intune. Accepts account credentials, password rotation, calendar sync, and Exchange server settings via the updateWindowsDeviceAccountActionParameter. Returns an empty 204 response on success. Required: managed_device_id.
• Disable Microsoft Intune managed devices disable Disable a managed device in Microsoft Intune by managed_device_id. Returns an empty 204 response on success. Required: managed_device_id.
• Execute Microsoft Intune managed devices execute action Execute a remote action on one or more managed devices in Microsoft Intune. Returns the value object containing successfulDeviceIds, failedDeviceIds, notFoundDeviceIds, and notSupportedDeviceIds. Required: actionName, deviceIds.
• Action Managed devices initiate on demand proactive remediation Initiate an on-demand proactive remediation on a Microsoft Intune managed device. Returns an empty 204 response on success. Required: managed_device_id, scriptPolicyId.
• Send Managed devices send custom notification to company portal Send a custom notification to the Company Portal app on a Microsoft Intune managed device. Returns an empty 204 response on success. Required: managed_device_id, notificationTitle, notificationBody.
• List List all Microsoft Intune detected apps List detected apps discovered by Microsoft Intune. Returns: @odata.type, id, displayName, version, sizeInByte, deviceCount, publisher, platform.type, id, displayName, version, sizeInByte, deviceCount, publisher, platform.
• Get Get single Microsoft Intune detected app by ID Get a single detected app in Microsoft Intune by id. Returns: @odata.type, id, displayName, version, sizeInByte, deviceCount, publisher, platform, value.type, id, displayName, version, sizeInByte, deviceCount, publisher, platform, value. Required: id.
• Create Create a Microsoft Intune detected app Create a new detected app in Microsoft Intune. Returns: @odata.type, id, displayName, version, sizeInByte, deviceCount, publisher, platform.
• Delete Delete a Microsoft Intune detected app by ID Delete a detected app in Microsoft Intune by id. Returns an empty 204 response on success. Required: id.
• Update Update a Microsoft Intune detected app by ID Update a detected app in Microsoft Intune by id. Returns: @odata.type, id, displayName, version, sizeInByte, deviceCount, publisher, platform, value. Required: id.
• List List all Microsoft Intune device compliance policies List device compliance policies in Microsoft Intune. Returns: @odata.type, id, createdDateTime, description, lastModifiedDateTime, displayName, version.
• Get Get single Microsoft Intune device compliance policy by ID Get a single device compliance policy in Microsoft Intune by id. Returns: @odata.type, id, createdDateTime, description, lastModifiedDateTime, displayName, version, value. Required: id.
• Assign Microsoft Intune device compliance policies assign Assign a device compliance policy in Microsoft Intune to specified targets. Returns a value collection of deviceCompliancePolicyAssignment objects, each including @odata.type, id, and target with targetType and entraObjectId. Required: device_compliance_policy_id, assignments.
• Action Microsoft Intune device compliance policies schedule actions for rules Schedule compliance actions for rules on a device compliance policy in Microsoft Intune. Returns an empty 204 response on success. Required: device_compliance_policy_id, deviceComplianceScheduledActionForRules.
• List List all Microsoft Intune device configurations List device configurations in Microsoft Intune. Returns: @odata.type, id, lastModifiedDateTime, createdDateTime, description, displayName, version.
• Get Get single Microsoft Intune device configuration by ID Get a single device configuration in Microsoft Intune by id. Returns: @odata.type, id, lastModifiedDateTime, createdDateTime, description, displayName, version, value. Required: id.
• Assign Microsoft Intune device configurations assign Assign a device configuration in Microsoft Intune to specified targets by providing a collection of assignments. Returns: value. Required: device_configuration_id, assignments.
• Get Microsoft Intune device configurations get oma setting plain text value Retrieve the plain text value of an OMA setting for a device configuration in Microsoft Intune. Returns: value. Required: device_configuration_id, secretReferenceValueId.
• List List all Microsoft Intune mobile apps List mobile apps managed in Microsoft Intune. Returns a collection of mobileApp objects including id, displayName, description, publisher, largeIcon, createdDateTime, lastModifiedDateTime, isFeatured, publishingState, and more.
• Get Get single Microsoft Intune mobile app by ID Get a single mobile app in Microsoft Intune by id. Returns the mobileApp object including id, displayName, description, publisher, largeIcon, createdDateTime, lastModifiedDateTime, isFeatured, publishingState, and more. Required: id.
• Assign Microsoft Intune mobile apps assign Assign a mobile app in Microsoft Intune to target groups with a specified install intent and assignment settings. Returns an empty 204 response on success. Required: mobile_app_id.
• Create Create a Microsoft Intune mobile app Create a new Win32 LOB app in Microsoft Intune. Returns the created win32LobApp object including id, displayName, description, publisher, createdDateTime, lastModifiedDateTime, publishingState, installCommandLine, applicableArchitectures, rules, installExperience, returnCodes, msiInformation, and more.
• Enable Microsoft Intune mobile apps enable applicable architectures Enable applicable architectures for a Win32 LOB app in Microsoft Intune. Accepts an applicableArchitectures value in the request body. Returns an empty 204 response on success. Required: mobile_app_id.
• List List all Microsoft Intune mobile app assignments List the group assignments for a Microsoft Intune mobile app. Returns each assignment's id, intent (available, required, uninstall, or availableWithoutEnrollment), target (the assigned group), and settings (per-platform install settings). Required: mobile_app_id.
• Get Get single Microsoft Intune mobile app assignment by ID Get a single group assignment for a Microsoft Intune mobile app by id. Returns: id, intent, target, settings. Required: mobile_app_id, id.
• Create Create a Microsoft Intune mobile app assignment Create a new group assignment for a Microsoft Intune mobile app. Returns the created assignment: id, intent, target, settings (201 Created). Required: mobile_app_id, intent, target.
• Delete Delete a Microsoft Intune mobile app assignment by ID Delete a group assignment for a Microsoft Intune mobile app. Returns an empty 204 response on success. Required: mobile_app_id, id.
• Update Update a Microsoft Intune mobile app assignment by ID Update an existing group assignment for a Microsoft Intune mobile app. Returns the updated assignment: id, intent, target, settings (200 OK). Required: mobile_app_id, id.
• List List all Microsoft Intune managed app protections List managed app protection policies in Microsoft Intune. Returns: @odata.type, displayName, description, createdDateTime, lastModifiedDateTime, id, version, periodOfflineBeforeAccessCheck, periodOnlineBeforeAccessCheck, allowedInboundDataTransferSources, allowedOutboundDataTransferDestinations, organizationalCredentialsRequired, allowedOutboundClipboardSharingLevel, dataBackupBlocked,…
• Get Get single Microsoft Intune managed app protection by ID Get a single managed app protection policy in Microsoft Intune by id. Returns: @odata.type, displayName, description, createdDateTime, lastModifiedDateTime, id, version, periodOfflineBeforeAccessCheck, periodOnlineBeforeAccessCheck, allowedInboundDataTransferSources, allowedOutboundDataTransferDestinations, organizationalCredentialsRequired, allowedOutboundClipboardSharingLevel,…
• Action Microsoft Intune managed app protections target apps Target apps for a managed app protection policy in Microsoft Intune by assigning a collection of managed mobile apps. Returns an empty 204 response on success. Required: managed_app_policy_id, apps.
• List List all Microsoft Intune mobile threat defense connectors List all mobile threat defense connectors configured in Microsoft Intune. Returns: @odata.type, id, lastHeartbeatDateTime, partnerState, androidMobileApplicationManagementEnabled, iosMobileApplicationManagementEnabled, androidEnabled, iosEnabled, windowsEnabled, androidDeviceBlockedOnMissingPartnerData, iosDeviceBlockedOnMissingPartnerData, windowsDeviceBlockedOnMissingPartnerData,…
• Get Get single Microsoft Intune mobile threat defense connector by ID Get a single mobile threat defense connector in Microsoft Intune by id. Returns: @odata.type, id, lastHeartbeatDateTime, partnerState, androidMobileApplicationManagementEnabled, iosMobileApplicationManagementEnabled, androidEnabled, iosEnabled, windowsEnabled, androidDeviceBlockedOnMissingPartnerData, iosDeviceBlockedOnMissingPartnerData, windowsDeviceBlockedOnMissingPartnerData,…
• Create Create a Microsoft Intune mobile threat defense connector Create a new mobile threat defense connector in Microsoft Intune. Returns the created connector including id, lastHeartbeatDateTime, partnerState, androidEnabled, iosEnabled, windowsEnabled, and partner compliance and MAM evaluation settings.
• Delete Delete a Microsoft Intune mobile threat defense connector by ID Delete a mobile threat defense connector in Microsoft Intune by id. Returns an empty 204 response on success. Required: id.
• Update Update a Microsoft Intune mobile threat defense connector by ID Update the properties of a mobile threat defense connector in Microsoft Intune by id. Returns the updated connector including id, lastHeartbeatDateTime, partnerState, androidEnabled, iosEnabled, windowsEnabled, and partner compliance and MAM evaluation settings. Required: id.
• List List all Microsoft Intune windows autopilot device identities List Windows Autopilot device identities in Microsoft Intune. Returns: @odata.type, id, groupTag, purchaseOrderIdentifier, serialNumber, productKey, manufacturer, model, enrollmentState, lastContactedDateTime, addressableUserName, userPrincipalName, resourceName, skuNumber, systemFamily, azureActiveDirectoryDeviceId, managedDeviceId, displayName.type, id, groupTag, purchaseOrderIdentifier,…
• Get Get single Microsoft Intune windows autopilot device identity by ID Get a single Windows Autopilot device identity by id in Microsoft Intune. Returns: @odata.type, id, groupTag, purchaseOrderIdentifier, serialNumber, productKey, manufacturer, model, enrollmentState, lastContactedDateTime, addressableUserName, userPrincipalName, resourceName, skuNumber, systemFamily, azureActiveDirectoryDeviceId, managedDeviceId, displayName, value.type, id, groupTag,…
• Create Create a Microsoft Intune windows autopilot device identity Create a new Windows Autopilot device identity in Microsoft Intune. Returns: @odata.type, id, groupTag, purchaseOrderIdentifier, serialNumber, productKey, manufacturer, model, enrollmentState, lastContactedDateTime, addressableUserName, userPrincipalName, resourceName, skuNumber, systemFamily, azureActiveDirectoryDeviceId, managedDeviceId, displayName.
• Delete Delete a Microsoft Intune windows autopilot device identity by ID Delete a Windows Autopilot device identity by id in Microsoft Intune. Returns an empty 204 response on success. Required: id.
• Assign Windows autopilot device identities assign user to device Assign a user to a Windows Autopilot device in Microsoft Intune by providing the user principal name and addressable user name. Returns an empty 204 response on success. Required: windows_autopilot_device_identity_id.
• Action Windows autopilot device identities unassign user from device Unassign the user from a Windows Autopilot device in msintune. Returns an empty 204 response on success. Required: windows_autopilot_device_identity_id.
• Update Windows autopilot device identities update device properties Update properties on a Windows Autopilot device in msintune, including user principal name, addressable user name, group tag, and display name. Returns an empty 204 response on success. Required: windows_autopilot_device_identity_id.
• Delete Microsoft Intune windows autopilot device identities delete devices Delete Windows Autopilot devices by serial numbers in msintune. Returns a collection of deleted device state objects including serialNumber, deviceRegistrationId, deletionState, and errorMessage. Required: serialNumbers.
• List List all Microsoft Intune group policy configurations List group policy configurations in Microsoft Intune. Returns: @odata.type, id, createdDateTime, description, displayName, lastModifiedDateTime, version.
• Get Get single Microsoft Intune device compliance setting state by ID Get a single device compliance setting state from Microsoft Intune, nested under a device compliance policy setting state summary. Returns: @odata.type, id, setting, settingName, deviceId, deviceName, userId, userEmail, userName, userPrincipalName, deviceModel, state, complianceGracePeriodExpirationDateTime, value. Required: device_compliance_policy_setting_state_summary_id, id. Requires an…
• List List all Microsoft Intune managed apps List managed apps in Microsoft Intune, returning properties and relationships of each managedApp object. Returns: @odata.type, id, displayName, description, publisher, largeIcon, createdDateTime, lastModifiedDateTime, isFeatured, privacyInformationUrl, informationUrl, owner, developer, notes, publishingState, appAvailability, version.type, id, displayName, description, publisher, largeIcon,…
• Create Create a Microsoft Intune android device owner compliance policy Create an Android Device Owner compliance policy in Microsoft Intune by posting to the device compliance policies endpoint. Returns the created policy including id, displayName, description, version, passwordRequired, deviceThreatProtectionEnabled, passwordRequiredType, storageRequireEncryption, and other compliance and security settings. Required: @odata.type (set to…
• Create Create a Microsoft Intune windows 10 custom configuration Create a new Windows 10 custom configuration in Microsoft Intune with custom OMA settings. Returns: @odata.type, id, lastModifiedDateTime, createdDateTime, description, displayName, version, omaSettings. Required: @odata.type, displayName. The omaSettings collection can contain a maximum of 1000 elements.
• List List all Microsoft Intune device management scripts List device management scripts in Microsoft Intune. Returns: id, displayName, description, scriptContent, createdDateTime, lastModifiedDateTime, runAsAccount, enforceSignatureCheck, fileName, roleScopeTagIds, runAs32Bit.
• Get Get single Microsoft Intune device management script by ID Get a single device management script in Microsoft Intune by id. Returns: id, displayName, description, scriptContent, createdDateTime, lastModifiedDateTime, runAsAccount, enforceSignatureCheck, fileName, roleScopeTagIds, runAs32Bit. Required: id.
• Create Create a Microsoft Intune device management script Create a new device management script in Microsoft Intune. Returns the created script including id, displayName, description, scriptContent, fileName, runAsAccount, enforceSignatureCheck, runAs32Bit, roleScopeTagIds, createdDateTime, and lastModifiedDateTime.
• Delete Delete a Microsoft Intune device management script by ID Delete a device management script in Microsoft Intune by id. Returns an empty 204 response on success. Required: id.
• Update Update a Microsoft Intune device management script by ID Update the properties of a device management script in Microsoft Intune by id. Returns the updated script including id, displayName, description, scriptContent, fileName, runAsAccount, enforceSignatureCheck, runAs32Bit, roleScopeTagIds, createdDateTime, and lastModifiedDateTime. Required: id.
• Assign Microsoft Intune device management scripts assign Assign a Microsoft Intune device management script to target groups. The body takes deviceManagementScriptAssignments (assignment targets) and/or deviceManagementScriptGroupAssignments (Entra group ids). Returns an empty 204 response on success. Required: device_management_script_id.
• List List all Microsoft Intune role scope tags List role scope tags in Microsoft Intune. Returns: @odata.type, id, displayName, description, isBuiltIn.type for each tag.
• Get Get single Microsoft Intune role scope tag by ID Get a single role scope tag in Microsoft Intune by id. Returns: @odata.type, id, displayName, description, isBuiltIn, value.type. Required: id.
• Create Create a Microsoft Intune role scope tag Create a new role scope tag in Microsoft Intune. Returns: @odata.type, id, displayName, description, isBuiltIn.type. Required: displayName.
• Delete Delete a Microsoft Intune role scope tag by ID Delete a role scope tag in Microsoft Intune by id. Returns an empty 204 response on success. Required: id.
• Update Update a Microsoft Intune role scope tag by ID Update the properties of a role scope tag in Microsoft Intune by id. Returns: @odata.type, id, displayName, description, isBuiltIn.type. Required: id.
• Assign Microsoft Intune role scope tags assign Assign a role scope tag in Microsoft Intune to groups via auto-assignments. Returns a value collection of roleScopeTagAutoAssignment objects, each containing id and target. Required: role_scope_tag_id, assignments.
• List List all Microsoft Intune device management intents List device management intents in Microsoft Intune. Returns: @odata.type, id, displayName, description, isAssigned, isMigratingToConfigurationPolicy, lastModifiedDateTime, templateId, roleScopeTagIds.
• Get Get single Microsoft Intune device management intent by ID Get a single device management intent by id in Microsoft Intune. Returns: @odata.type, id, displayName, description, isAssigned, isMigratingToConfigurationPolicy, lastModifiedDateTime, templateId, roleScopeTagIds. Required: id.
• Create Create a Microsoft Intune device management intent Create a new device management intent in Microsoft Intune. Returns the created intent including id, displayName, description, isAssigned, templateId, and roleScopeTagIds.
• Delete Delete a Microsoft Intune device management intent by ID Delete a device management intent by id in Microsoft Intune. Returns an empty 204 response on success. Required: id.
• Update Update a Microsoft Intune device management intent by ID Update a device management intent by id in Microsoft Intune. Returns the updated intent including id, displayName, description, isAssigned, templateId, and roleScopeTagIds. Required: id.
• Update Microsoft Intune device management intents update settings Update settings for a Microsoft Intune device management intent by applying a collection of setting instances. Returns an empty 204 response on success. Required: device_management_intent_id, settings.
• Action Microsoft Intune device management intents migrate to template Migrate a Microsoft Intune device management intent from its current template to a new template. Returns an empty 204 response on success. Required: device_management_intent_id, newTemplateId.
• Create Microsoft Intune device management intents create copy Create a copy of an existing device management intent in Microsoft Intune. Returns the copied deviceManagementIntent object including id, displayName, description, isAssigned, isMigratingToConfigurationPolicy, lastModifiedDateTime, templateId, and roleScopeTagIds. Required: device_management_intent_id.
• Assign Microsoft Intune device management intents assign Assign a Microsoft Intune device management intent (a settings catalog / template-based configuration profile) to one or more groups. Returns an empty 204 response on success. Required: device_management_intent_id, assignments.
• Action Microsoft Intune device management intents compare Compare a Microsoft Intune device management intent's current settings against a template's settings (Microsoft Graph beta). Returns a 200 OK with one deviceManagementSettingComparison entry per compared setting: id, displayName, definitionId, currentValueJson, newValueJson, comparisonResult. Required: device_management_intent_id, template_id.
• Get Microsoft Intune device management intents get customized settings Get the settings on a Microsoft Intune device management intent that have been customized away from their default values. Returns a 200 OK with one deviceManagementIntentCustomizedSetting entry per customized setting: definitionId, defaultJson, customizedJson. Required: device_management_intent_id.
• List List all Microsoft Intune reusable policy settings List device management reusable policy settings in Microsoft Intune. Returns: id, displayName, description, settingDefinitionId, settingInstance, createdDateTime, lastModifiedDateTime, version, referencingConfigurationPolicyCount.
• Get Get single Microsoft Intune reusable policy setting by ID Get a single device management reusable policy setting in Microsoft Intune by id. Returns: id, displayName, description, settingDefinitionId, settingInstance, createdDateTime, lastModifiedDateTime, version, referencingConfigurationPolicyCount. Required: id.
• Create Create a Microsoft Intune reusable policy setting Create a new device management reusable policy setting in Microsoft Intune. Returns the created setting object including id, displayName, description, settingDefinitionId, settingInstance, createdDateTime, lastModifiedDateTime, version, and referencingConfigurationPolicyCount.
• Delete Delete a Microsoft Intune reusable policy setting by ID Delete a deviceManagementReusablePolicySetting in msintune by id. Returns an empty 204 response on success. Required: id.
• Update Update a Microsoft Intune reusable policy setting by ID Update the properties of a deviceManagementReusablePolicySetting in msintune by id. Returns: id, displayName, description, settingDefinitionId, settingInstance, createdDateTime, lastModifiedDateTime, version, referencingConfigurationPolicyCount. Required: id.
• Action Microsoft Intune reusable policy settings clone Clone a Microsoft Intune device management reusable policy setting, producing a new copy of the original. Returns the cloned setting including id, displayName, description, settingDefinitionId, settingInstance, createdDateTime, lastModifiedDateTime, version, and referencingConfigurationPolicyCount. Required: device_management_reusable_policy_setting_id.
• List List all Microsoft Intune intune branding profiles List Intune branding profiles in Microsoft Intune. Returns: @odata.type, id, profileName, profileDescription, isDefaultProfile, createdDateTime, lastModifiedDateTime, displayName, themeColor, showLogo, showDisplayNameNextToLogo, themeColorLogo, lightBackgroundLogo, landingPageCustomizedImage, contactITName, contactITPhoneNumber, contactITEmailAddress, contactITNotes, onlineSupportSiteUrl,…
• Get Get single Microsoft Intune intune branding profile by ID Get a single Intune branding profile by id in Microsoft Intune. Returns: id, error. Required: id.
• Create Create a Microsoft Intune intune branding profile Create a new Intune branding profile (Company Portal branding: name, theme color, logos, IT contact and privacy text). Returns the created intuneBrandingProfile including id, profileName, displayName, themeColor and the other branding fields.
• Delete Delete a Microsoft Intune intune branding profile by ID Delete an Intune branding profile by id. Returns an empty 204 response on success. Required: id.
• Update Update a Microsoft Intune intune branding profile by ID Update the properties of an Intune branding profile by id. Returns: id, error. Required: id.
• Assign Microsoft Intune intune branding profiles assign Assign group assignments to an Intune branding profile in Microsoft Intune. The body contains an assignments collection of intuneBrandingProfileAssignment objects, each with a target. Returns an empty 204 response on success. Required: intune_branding_profile_id, assignments.
• List List all Microsoft Intune managed device cleanup rules List managed device cleanup rules in Microsoft Intune. Returns: @odata.type, id, displayName, description, deviceCleanupRulePlatformType, lastModifiedDateTime, deviceInactivityBeforeRetirementInDays.type, id, displayName, description, deviceCleanupRulePlatformType, lastModifiedDateTime, deviceInactivityBeforeRetirementInDays.
• Get Get single Microsoft Intune managed device cleanup rule by ID Get a single managed device cleanup rule in Microsoft Intune by id. Returns: @odata.type, id, displayName, description, deviceCleanupRulePlatformType, lastModifiedDateTime, deviceInactivityBeforeRetirementInDays.type, id, displayName, description, deviceCleanupRulePlatformType, lastModifiedDateTime, deviceInactivityBeforeRetirementInDays. Required: id.
• Create Create a Microsoft Intune managed device cleanup rule Create a new managed device cleanup rule in Microsoft Intune. Returns: @odata.type, id, displayName, description, deviceCleanupRulePlatformType, lastModifiedDateTime, deviceInactivityBeforeRetirementInDays.type, id, displayName, description, deviceCleanupRulePlatformType, lastModifiedDateTime, deviceInactivityBeforeRetirementInDays.
• Delete Delete a Microsoft Intune managed device cleanup rule by ID Delete a managed device cleanup rule in Microsoft Intune by id. Returns an empty 204 response on success. Required: id.
• Update Update a Microsoft Intune managed device cleanup rule by ID Update the properties of a managed device cleanup rule in Microsoft Intune by id. Returns: @odata.type, id, displayName, description, deviceCleanupRulePlatformType, lastModifiedDateTime, deviceInactivityBeforeRetirementInDays.type, id, displayName, description, deviceCleanupRulePlatformType, lastModifiedDateTime, deviceInactivityBeforeRetirementInDays. Required: id.
• List List all Microsoft Intune device custom attribute shell scripts List device custom attribute shell scripts in Microsoft Intune. Returns: @odata.type, id, customAttributeName, customAttributeType, displayName, description, scriptContent, createdDateTime, lastModifiedDateTime, runAsAccount, fileName, roleScopeTagIds.type, id, customAttributeName, customAttributeType, displayName, description, scriptContent, createdDateTime, lastModifiedDateTime, runAsAccount,…
• Get Get single Microsoft Intune device custom attribute shell script by ID Get a single device custom attribute shell script by id in Microsoft Intune. Returns: @odata.type, id, customAttributeName, customAttributeType, displayName, description, scriptContent, createdDateTime, lastModifiedDateTime, runAsAccount, fileName, roleScopeTagIds.type, id, customAttributeName, customAttributeType, displayName, description, scriptContent, createdDateTime, lastModifiedDateTime,…
• Create Create a Microsoft Intune device custom attribute shell script Create a new device custom attribute shell script in Microsoft Intune. Returns the created script object including id, displayName, customAttributeName, customAttributeType, scriptContent, runAsAccount, and other script properties.
• Delete Delete a Microsoft Intune device custom attribute shell script by ID Delete a device custom attribute shell script by id in Microsoft Intune. Returns an empty 204 response on success. Required: id.
• Update Update a Microsoft Intune device custom attribute shell script by ID Update the properties of a device custom attribute shell script by id in Microsoft Intune. Returns the updated script object including id, displayName, customAttributeName, customAttributeType, scriptContent, runAsAccount, and other script properties. Required: id.
• Assign Microsoft Intune device custom attribute shell scripts assign Assign a device custom attribute shell script to target groups in Microsoft Intune. The body takes deviceManagementScriptAssignments (assignment targets) and/or deviceManagementScriptGroupAssignments (Entra group ids). Returns an empty 204 response on success. Required: device_custom_attribute_shell_script_id.
• List List all Microsoft Intune managed device encryption states List managed device encryption states in Microsoft Intune. Returns: @odata.type, id, userPrincipalName, deviceType, osVersion, tpmSpecificationVersion, deviceName, encryptionReadinessState, encryptionState, encryptionPolicySettingState, advancedBitLockerStates, fileVaultStates, policyDetails.type, id, userPrincipalName, deviceType, osVersion, tpmSpecificationVersion, deviceName,…
• Get Get single Microsoft Intune managed device encryption state by ID Get a single managed device encryption state by id in Microsoft Intune. Returns: @odata.type, id, userPrincipalName, deviceType, osVersion, tpmSpecificationVersion, deviceName, encryptionReadinessState, encryptionState, encryptionPolicySettingState, advancedBitLockerStates, fileVaultStates, policyDetails.type, id, userPrincipalName, deviceType, osVersion, tpmSpecificationVersion, deviceName,…
• Create Create a Microsoft Intune managed device encryption state Create a managed device encryption state record in Microsoft Intune. Returns the created managedDeviceEncryptionState including id, userPrincipalName, deviceType, deviceName, osVersion, encryptionState, encryptionReadinessState and policyDetails.
• Delete Delete a Microsoft Intune managed device encryption state by ID Delete a managed device encryption state by id in Microsoft Intune. Returns an empty 204 response on success. Required: id.
• Update Update a Microsoft Intune managed device encryption state by ID Update the properties of a managed device encryption state by id in Microsoft Intune. Returns: @odata.type, id, userPrincipalName, deviceType, osVersion, tpmSpecificationVersion, deviceName, encryptionReadinessState, encryptionState, encryptionPolicySettingState, advancedBitLockerStates, fileVaultStates, policyDetails.type, id, userPrincipalName, deviceType, osVersion, tpmSpecificationVersion,…
• List List all Microsoft Intune user experience analytics device scopes List user experience analytics device scope configurations in Microsoft Intune. Returns: @odata.type, id, deviceScopeName, ownerId, isBuiltIn, enabled, status, parameter, operator, valueObjectId, value, createdDateTime, lastModifiedDateTime.
• Get Get single Microsoft Intune user experience analytics device scope by ID Get a single user experience analytics device scope configuration in Microsoft Intune by id. Returns the full device scope object including id, deviceScopeName, ownerId, isBuiltIn, enabled, status, parameter, operator, valueObjectId, value, createdDateTime, and lastModifiedDateTime. Required: id.
• Action User experience analytics device scopes trigger device scope act Trigger an action (such as re-evaluation) on a Microsoft Intune user experience analytics device scope. Returns a 200 OK with a deviceScopeActionResult indicating the outcome: deviceScopeAction, deviceScopeId, status, and failedMessage if it failed. Required: actionName, deviceScopeId.
• List List all Microsoft Intune operation approval policies List operation approval policies in Microsoft Intune. Returns: @odata.type, id, displayName, description, lastModifiedDateTime, policyType, policyPlatform, policySet, approverGroupIds.type, id, displayName, description, lastModifiedDateTime, policyType, policyPlatform, policySet, approverGroupIds.
• Get Get single Microsoft Intune operation approval policy by ID Get a single operation approval policy by id in Microsoft Intune. Returns: @odata.type, id, displayName, description, lastModifiedDateTime, policyType, policyPlatform, policySet, approverGroupIds.type, id, displayName, description, lastModifiedDateTime, policyType, policyPlatform, policySet, approverGroupIds. Required: id.
• Create Create a Microsoft Intune operation approval policy Create a new operation approval policy in Microsoft Intune. Returns: @odata.type, id, displayName, description, lastModifiedDateTime, policyType, policyPlatform, policySet, approverGroupIds, version, sizeInByte, deviceCount, publisher, platform.type, id, displayName, description, lastModifiedDateTime, policyType, policyPlatform, policySet, approverGroupIds. Required: displayName, policySet,…
• Delete Delete a Microsoft Intune operation approval policy by ID Delete an operation approval policy in Microsoft Intune by id. Returns an empty 204 response on success. Required: id.
• Update Update a Microsoft Intune operation approval policy by ID Update the properties of an operation approval policy in Microsoft Intune by id. Returns the updated policy object including id, displayName, description, lastModifiedDateTime, policyType, policyPlatform, policySet, and approverGroupIds. Required: id.
• Action Operation approval policies retrieve approvable operations Retrieve the operations that can be put under multi-admin approval in Microsoft Intune. Returns a collection of operationApprovalPolicySet objects including @odata.type, policyType, and policyPlatform.
• Action Operation approval policies retrieve operations requiring approv Retrieve the operations that currently require multi-admin approval in Microsoft Intune. Returns a collection of operationApprovalPolicySet objects including @odata.type, policyType, and policyPlatform.
• List List all Microsoft Intune windows driver update profiles List Windows driver update profiles in Microsoft Intune. Returns: @odata.type, id, displayName, description, approvalType, deviceReporting, newUpdates, deploymentDeferralInDays, createdDateTime, lastModifiedDateTime, roleScopeTagIds, inventorySyncStatus.type, id, displayName, description, approvalType, deviceReporting, newUpdates, deploymentDeferralInDays, createdDateTime, lastModifiedDateTime,…
• Get Get single Microsoft Intune windows driver update profile by ID Get a single Windows driver update profile by id in Microsoft Intune. Returns: @odata.type, id, displayName, version, sizeInByte, deviceCount, publisher, platform. Required: id.
• Create Create a Microsoft Intune windows driver update profile Create a new Windows driver update profile in Microsoft Intune. Returns the created profile including id, displayName, description, approvalType, deviceReporting, newUpdates, deploymentDeferralInDays, createdDateTime, lastModifiedDateTime, roleScopeTagIds, and inventorySyncStatus. Required: displayName.
• Delete Delete a Microsoft Intune windows driver update profile by ID Delete a Windows driver update profile by id in Microsoft Intune. Returns an empty 204 response on success. Required: id.
• Update Update a Microsoft Intune windows driver update profile by ID Update the properties of a Windows driver update profile by id in Microsoft Intune. Returns the updated profile including id, displayName, description, approvalType, deviceReporting, newUpdates, deploymentDeferralInDays, createdDateTime, lastModifiedDateTime, roleScopeTagIds, and inventorySyncStatus. Required: id.
• Update Microsoft Intune windows driver update profiles assign Assign group assignments to a Windows driver update profile in Microsoft Intune. The body contains an assignments collection of windowsDriverUpdateProfileAssignment objects, each with a target. Returns an empty 204 response on success. Required: windows_driver_update_profile_id, assignments.
• Update Microsoft Intune windows driver update profiles execute action Execute a bulk action (approve, decline, or suspend) on drivers within a Microsoft Intune Windows driver update profile's inventory. Returns a 200 OK with a bulkDriverActionResult listing which driver ids succeeded, failed, or were not found. Required: windows_driver_update_profile_id, actionName, driverIds.
• Update Microsoft Intune windows driver update profiles sync inventory Sync the driver inventory of a Windows Driver Update Profile in Microsoft Intune. Returns an empty 204 response on success. Required: windows_driver_update_profile_id.
• List List all Microsoft Intune dep onboarding settings List DEP onboarding settings in Microsoft Intune. Returns a collection of depOnboardingSetting objects including id, appleIdentifier, tokenName, tokenType, tokenExpirationDateTime, syncedDeviceCount, and lastModifiedDateTime.
• Get Get single Microsoft Intune dep onboarding setting by ID Get a single DEP onboarding setting by id in Microsoft Intune. Returns the full depOnboardingSetting object including id, appleIdentifier, tokenName, tokenType, tokenExpirationDateTime, lastModifiedDateTime, and syncedDeviceCount. Required: id.
• Create Create a Microsoft Intune dep onboarding setting Create a new DEP onboarding setting in Microsoft Intune. Returns the created depOnboardingSetting object including id, appleIdentifier, tokenName, tokenType, tokenExpirationDateTime, and syncedDeviceCount.
• Delete Delete a Microsoft Intune dep onboarding setting by ID Delete a DEP onboarding setting by id in Microsoft Intune. Returns an empty 204 response on success. Required: id.
• Update Update a Microsoft Intune dep onboarding setting by ID Update the properties of a DEP onboarding setting by id in Microsoft Intune. Returns the updated depOnboardingSetting object including id, appleIdentifier, tokenName, tokenType, tokenExpirationDateTime, and syncedDeviceCount. Required: id.
• Get Microsoft Intune dep onboarding settings get encryption public key Get the encryption public key for a DEP onboarding setting in Microsoft Intune, used to encrypt the Apple Device Enrollment Program token. Returns: value. Required: dep_onboarding_setting_id.
• Generate Microsoft Intune dep onboarding settings generate encryption public key Generate a new encryption public key for a DEP onboarding setting in Microsoft Intune, used to encrypt the Apple Device Enrollment Program token. Returns: value. Required: dep_onboarding_setting_id.
• Upload Microsoft Intune dep onboarding settings upload dep token Upload a new Device Enrollment Program (DEP) token to an existing DEP onboarding setting in Microsoft Intune. Returns an empty 204 response on success. Required: dep_onboarding_setting_id, appleId, depToken.
• Sync Dep onboarding settings sync with apple device enrollment progra Sync an Intune DEP onboarding setting with the Apple Device Enrollment Program to pull the latest devices from Apple DEP. Returns an empty 204 response on success. Required: dep_onboarding_setting_id.
• List List all Microsoft Intune enrollment profiles List enrollment profiles for a DEP onboarding setting in Microsoft Intune. Returns: @odata.type, id, displayName, description, requiresUserAuthentication, configurationEndpointUrl, enableAuthenticationViaCompanyPortal, requireCompanyPortalOnSetupAssistantEnrolledDevices. Required: dep_onboarding_setting_id.
• List List all Microsoft Intune imported device identities List imported device identities registered with Microsoft Intune (devices pre-registered by IMEI, serial number, or manufacturer/model/serial before enrollment). Returns each identity's id, importedDeviceIdentifier, importedDeviceIdentityType, description, enrollmentState, platform, createdDateTime, lastModifiedDateTime, lastContactedDateTime.
• Get Get single Microsoft Intune imported device identity by ID Get a single imported device identity by id. Returns: id, importedDeviceIdentifier, importedDeviceIdentityType, description, enrollmentState, platform, createdDateTime, lastModifiedDateTime, lastContactedDateTime. Required: id.
• Create Create a Microsoft Intune imported device identity Create (pre-register) a single imported device identity in Microsoft Intune. Returns the created identity (201 Created).
• Delete Delete a Microsoft Intune imported device identity by ID Delete an imported device identity by id. Returns an empty 204 response on success. Required: id.
• Update Update a Microsoft Intune imported device identity by ID Update an existing imported device identity by id. Returns the updated identity (200 OK). Required: id.
• Import Microsoft Intune imported device identities import device identity list Bulk-import a list of device identities into Microsoft Intune in a single call. Returns a 200 OK with one importedDeviceIdentityResult per submitted identity, each carrying a status flag indicating whether that individual item succeeded. Required: importedDeviceIdentities.
• Search Microsoft Intune imported device identities search existing identities Check which of a submitted list of device identities already exist as imported device identities in Microsoft Intune. Returns a 200 OK with the subset of submitted identities that were found to already exist. Required: importedDeviceIdentities.
• List List all Microsoft Intune android device owner enrollment profiles List androidDeviceOwnerEnrollmentProfiles in Microsoft Intune. Returns: @odata.type, accountId, id, displayName, description, enrollmentMode, enrollmentTokenType, createdDateTime, lastModifiedDateTime, tokenValue, tokenCreationDateTime, tokenExpirationDateTime, enrolledDeviceCount, enrollmentTokenUsageCount, qrCodeContent, qrCodeImage, roleScopeTagIds, configureWifi, wifiSsid, wifiPassword,…
• Get Get android device owner enrollment profile by ID Get a single androidDeviceOwnerEnrollmentProfile by id in Microsoft Intune. Returns: @odata.type, id, displayName, value. Required: id.
• Create Create a Microsoft Intune android device owner enrollment profile Create a new androidDeviceOwnerEnrollmentProfile in Microsoft Intune. Returns the created profile including id, accountId, displayName, enrollmentMode, enrollmentTokenType, createdDateTime, lastModifiedDateTime, and Wi-Fi configuration properties.
• Delete Delete a Microsoft Intune android device owner enrollment profile by ID Delete an androidDeviceOwnerEnrollmentProfile by id in Microsoft Intune. Returns an empty 204 response on success. Required: id.
• Update Update a Microsoft Intune android device owner enrollment profile by ID Update the properties of an androidDeviceOwnerEnrollmentProfile by id in Microsoft Intune. Returns the updated profile including id, accountId, displayName, enrollmentMode, enrollmentTokenType, lastModifiedDateTime, configureWifi, wifiSsid, wifiSecurityType, and deviceNameTemplate. Required: id.
• Revoke Microsoft Intune android device owner enrollment profiles revoke token Revoke the enrollment token for an Android device owner enrollment profile in Microsoft Intune. Returns an empty 204 response on success. Required: android_device_owner_enrollment_profile_id.
• Create Microsoft Intune android device owner enrollment profiles create token Create a new enrollment token for an Android device owner enrollment profile in Microsoft Intune. Returns an empty 204 response on success. Required: android_device_owner_enrollment_profile_id.
• Sync Device app management sync microsoft store for business apps Sync the Intune account with Microsoft Store for Business to trigger an application sync. Returns an empty 204 response on success.
• List List all Microsoft Intune device app management Get the Intune deviceAppManagement singleton object, which contains Microsoft Store for Business onboarding and sync configuration. Returns: @odata.type, id, isEnabledForMicrosoftStoreForBusiness, microsoftStoreForBusinessLanguage, microsoftStoreForBusinessLastCompletedApplicationSyncTime, microsoftStoreForBusinessLastSuccessfulSyncDateTime, microsoftStoreForBusinessPortalSelection.type.
• Update Microsoft Intune device app management bulk update Update properties of the Intune deviceAppManagement singleton object, including Microsoft Store for Business sync and portal selection settings. Returns: @odata.type, id, isEnabledForMicrosoftStoreForBusiness, microsoftStoreForBusinessLanguage, microsoftStoreForBusinessLastCompletedApplicationSyncTime, microsoftStoreForBusinessLastSuccessfulSyncDateTime, microsoftStoreForBusinessPortalSelection,…
• List List all Microsoft Intune mobile app troubleshooting events List mobile app troubleshooting events in Microsoft Intune. Returns: @odata.type, id, eventDateTime, correlationId, troubleshootingErrorDetails, eventName, additionalInformation, managedDeviceIdentifier, userId, applicationId, history.
• Get Get single Microsoft Intune mobile app troubleshooting event by ID Get a mobile app troubleshooting event by id in Microsoft Intune. Returns: @odata.type, id, eventDateTime, correlationId, troubleshootingErrorDetails, eventName, additionalInformation, managedDeviceIdentifier, userId, applicationId, history. Required: id.
• Create Create a Microsoft Intune mobile app troubleshooting event Create a mobile app troubleshooting event in Microsoft Intune. Returns the created mobileAppTroubleshootingEvent with its @odata.type and id.
• Delete Delete a Microsoft Intune mobile app troubleshooting event by ID Delete a mobile app troubleshooting event by id in Microsoft Intune. Returns an empty 204 response on success. Required: id.
• Update Update a Microsoft Intune mobile app troubleshooting event by ID Update a mobile app troubleshooting event by id in Microsoft Intune. Returns the updated event including id, eventDateTime, correlationId, applicationId, userId, and troubleshootingErrorDetails. Required: id.
• List List all Microsoft Intune privilege management elevation requests List privilege management elevation requests in Microsoft Intune EPM. Returns: @odata.type, id, requestedByUserId, requestedOnDeviceId, requestedByUserPrincipalName, deviceName, requestCreatedDateTime, requestLastModifiedDateTime, requestJustification, applicationDetail, status, reviewCompletedByUserId, reviewCompletedByUserPrincipalName, reviewCompletedDateTime, requestExpiryDateTime,…
• Get Get single Microsoft Intune privilege management elevation request by ID Get a single privilege management elevation request in Microsoft Intune EPM by id. Returns: @odata.type, id, keepEnrollmentData, keepUserData, macOsUnlockCode, obliterationBehavior, persistEsimDataPlan. Required: id.
• Approve Microsoft Intune privilege management elevation requests approve Approve a pending privilege management elevation request in Microsoft Intune EPM. Returns the updated elevation request including id, status, reviewCompletedByUserId, reviewCompletedByUserPrincipalName, reviewCompletedDateTime, and reviewerJustification. Required: privilege_management_elevation_request_id.
• Action Microsoft Intune privilege management elevation requests deny Deny a pending privilege management elevation request in Microsoft Intune EPM. Returns the updated elevation request including id, status, reviewCompletedByUserId, reviewCompletedByUserPrincipalName, reviewCompletedDateTime, and reviewerJustification. Required: privilege_management_elevation_request_id.
• Revoke Microsoft Intune privilege management elevation requests revoke Revoke an approved privilege management elevation request in Microsoft Intune EPM. Returns the updated elevation request including id, status, reviewCompletedByUserId, reviewCompletedByUserPrincipalName, reviewCompletedDateTime, and reviewerJustification. Required: privilege_management_elevation_request_id.
• List List all Microsoft Intune me Get the current authenticated user's profile in Microsoft Intune via the Microsoft Graph /me endpoint. Returns: id, value.
• List List all Microsoft Intune mobile app install summary Get the install status summary for a Microsoft Intune mobile app across all assigned devices and users: counts of installed, failed, not applicable, not installed, and pending-install, broken out by device and by user. Required: mobile_app_id.
• List List all Microsoft Intune groups List Microsoft Entra ID (Azure AD) groups in the tenant — Microsoft 365 groups, security groups, and distribution groups. Returns each group's core attributes by default: id, displayName, description, mail, mailEnabled, mailNickname, groupTypes, securityEnabled, visibility, createdDateTime, expirationDateTime, and more. Additional properties are available via $select.
• Get Get single Microsoft Intune group by ID Get a single Microsoft Entra ID group by id. Returns the default property set unless $select is used. Required: id.
• Create Create a Microsoft Intune group Create a new Microsoft Entra ID group — a Microsoft 365 group, security group, or dynamic group depending on the properties supplied. Returns the created group's default properties (201 Created). Required: displayName, mailEnabled, mailNickname, securityEnabled.
• Update Update a Microsoft Intune group by ID Update a Microsoft Entra ID group's properties. Supply only the fields that should change. Returns an empty 204 response on success in most cases (200 OK with a small set of specific properties, e.g. hideFromAddressLists). Required: id.
• Delete Delete a Microsoft Intune group by ID Delete a Microsoft Entra ID group. Returns an empty 204 response on success. Required: id.
• List List all Microsoft Intune users List Microsoft Entra ID (Azure AD) user accounts in the tenant. By default only a limited property set is returned: businessPhones, displayName, givenName, id, jobTitle, mail, mobilePhone, officeLocation, preferredLanguage, surname, userPrincipalName. Request additional properties via $select.
• Get Get single Microsoft Intune user by ID Get a single Microsoft Entra ID user by id or userPrincipalName. Returns the default property set unless $select is used. Required: id.
• Create Create a Microsoft Intune user Create a new Microsoft Entra ID user. Returns the created user (201 Created). Required: accountEnabled, displayName, mailNickname, userPrincipalName, passwordProfile.
• Update Update a Microsoft Intune user by ID Update a Microsoft Entra ID user's properties. Supply only the fields that should change. Returns an empty 204 response on success. Required: id.
• Delete Delete a Microsoft Intune user by ID Delete a Microsoft Entra ID user. Returns an empty 204 response on success. Required: id.
• List List all Microsoft Intune organization Get the calling tenant's organization profile from Microsoft Entra ID. Always returns a single-item collection — the tenant has exactly one organization object. Returns: id (tenant id), displayName, businessPhones, city, country, countryLetterCode, createdDateTime, defaultUsageLocation, preferredLanguage, tenantType, technicalNotificationMails, directorySizeQuota, and more.
• Get Get single Microsoft Intune organization by ID Get the tenant's organization object by id. Since a tenant has exactly one organization object, this returns the same data as the list method scoped by id. Returns: id, displayName, businessPhones, city, country, tenantType, directorySizeQuota, and more. Required: id (the tenant/organization id).
• Update Update a Microsoft Intune organization by ID Update the tenant's organization properties. Only a small subset of properties are writable — most organization fields are directory-managed and read-only. Returns an empty 204 response on success. Required: id.
• List List all Microsoft Intune role definitions List Microsoft Intune role-based access control (RBAC) role definitions — the built-in and custom roles that determine what actions an Intune administrator can perform. Returns each definition's id, displayName, description, rolePermissions (allowed and not-allowed resource actions), and isBuiltIn.
• List List all Microsoft Intune role assignments List the role assignments for a Microsoft Intune RBAC role definition — the groups and scopes that a given role has been assigned to. Returns each assignment's id, displayName, description, and resourceScopes (the Entra ID group ids the assignment's scope is limited to). Required: role_definition_id.
• List List all Microsoft Intune resource operations List the resource operations available in Microsoft Intune — the individual permission strings (e.g. Microsoft.Intune/MobileApps/Read) that can be granted or denied within a role definition's rolePermissions. Use this to discover valid values when constructing a custom role definition.
• List List all Microsoft Intune managed device users List the primary user(s) assigned to a Microsoft Intune managed device, with pagination. This is the Primary user shown in the Intune admin center and reflects reassignments made by an admin, unlike the userId/userPrincipalName/userDisplayName fields on the managed device object, which represent the enrolled-by user and do not change after enrollment. Returns: @odata.type, id. Only the user id is returned by Microsoft Graph; resolve the user's name and email via the users resource (get with the returned id). Required: managed_device_id.
• List List all Microsoft Intune managed devices beta List managed devices enrolled in Microsoft Intune using the Graph beta endpoint. Unlike the v1.0 managed_devices resource, this returns deviceType (desktop, iPhone, iPad, macMDM, cloudPC, ...) and chassisType. chassisType and hardwareInformation come back as 'unknown'/defaults on this list call by design; use managed_devices_beta get with $select to read the actual chassis type. Supports $filter, $select, $orderby, $expand and $count. Paginated. Returns: @odata.type, id, userId, deviceName, hardwareInformation, ownerType, managedDeviceOwnerType, managementState, enrolledDateTime, lastSyncDateTime, chassisType, operatingSystem, deviceType, complianceState, jailBroken, managementAgent, osVersion, azureADRegistered, deviceEnrollmentType, lostModeState, emailAddress, azureADDeviceId, deviceRegistrationState, deviceCategoryDisplayName, isSupervised, isEncrypted, userPrincipalName, model, manufacturer, imei, serialNumber, phoneNumber, androidSecurityPatchLevel, userDisplayName, wiFiMacAddress, ethernetMacAddress, totalStorageSpaceInBytes, freeStorageSpaceInBytes, physicalMemoryInBytes, managedDeviceName, partnerReportedThreatState, autopilotEnrolled, joinType, processorArchitecture, skuFamily, enrollmentProfileName, notes, udid, iccid.
• Get Get single Microsoft Intune managed devices beta by ID Get a single Intune managed device by id using the Graph beta endpoint. Pass $select to retrieve non-default hardware inventory properties such as chassisType (desktop, laptop, worksWorkstation, enterpriseServer, phone, tablet, ...), hardwareInformation, ethernetMacAddress and physicalMemoryInBytes, which are only populated on this single-device GET. Returns: @odata.type, id, userId, deviceName, hardwareInformation, ownerType, managedDeviceOwnerType, managementState, enrolledDateTime, lastSyncDateTime, chassisType, operatingSystem, deviceType, complianceState, jailBroken, managementAgent, osVersion, azureADRegistered, deviceEnrollmentType, lostModeState, emailAddress, azureADDeviceId, deviceRegistrationState, deviceCategoryDisplayName, isSupervised, isEncrypted, userPrincipalName, model, manufacturer, imei, serialNumber, phoneNumber, androidSecurityPatchLevel, userDisplayName, wiFiMacAddress, ethernetMacAddress, totalStorageSpaceInBytes, freeStorageSpaceInBytes, physicalMemoryInBytes, managedDeviceName, partnerReportedThreatState, autopilotEnrolled, joinType, processorArchitecture, skuFamily, enrollmentProfileName, notes, udid, iccid.
• List List all Microsoft Intune managed device detected apps List the apps Microsoft Intune detected on a managed device, with pagination. These are the apps found installed on that one device by the device inventory, not the app catalog and not the apps assigned for deployment. Uses the Microsoft Graph beta endpoint (the per-device detectedApps relationship is not available in v1.0). Returns: @odata.type, id, displayName, version, sizeInByte, deviceCount, publisher, platform. Required: managed_device_id.

No tools match your search.