Read managed device and detected application inventories, inspect compliance policy status and device configuration metadata, and request device sync, restart, remote lock, or retirement. Uses Microsoft Graph v1.0 with a work or school account and an active Intune tenant license. Remote actions depend on device platform and the connected administrator’s Intune permissions.
Read one page of devices from Microsoft Intune
| Parameter | Type | Required | Description |
|---|
top | number | No | Requested page size from 1 to 1000 (default: 100); ignored with nextLink |
nextLink | string | No | The nextLink from the previous response for this same operation and resource |
filter | string | No | OData filter, for example complianceState eq 'noncompliant'; ignored with nextLink |
| Parameter | Type | Description |
|---|
nextLink | string | Continuation URL for the next page; null when this is the final page |
devices | array | List Devices |
↳ id | string | Intune managed device ID |
↳ deviceName | string | Device name |
↳ managedDeviceOwnerType | string | Ownership: company, personal, or unknown |
↳ managementState | string | Current device management state |
↳ enrolledDateTime | string | Enrollment time |
↳ lastSyncDateTime | string | Last check-in time |
↳ operatingSystem | string | Operating system |
↳ osVersion | string | Operating system version |
↳ complianceState | string | Device compliance state |
↳ isEncrypted | boolean | Whether device storage is encrypted |
↳ userId | string | Primary user ID |
↳ userPrincipalName | string | Primary user principal name |
↳ userDisplayName | string | Primary user display name |
↳ emailAddress | string | User email address |
↳ azureADDeviceId | string | Microsoft Entra device ID |
↳ serialNumber | string | Device serial number |
↳ manufacturer | string | Device manufacturer |
↳ model | string | Device model |
↳ totalStorageSpaceInBytes | number | Total storage capacity in bytes |
↳ freeStorageSpaceInBytes | number | Available storage in bytes |
Read device details from Microsoft Intune
| Parameter | Type | Required | Description |
|---|
managedDeviceId | string | Yes | Intune managed device ID (not the Microsoft Entra device ID) |
| Parameter | Type | Description |
|---|
device | json | Get Device |
↳ id | string | Intune managed device ID |
↳ deviceName | string | Device name |
↳ managedDeviceOwnerType | string | Ownership: company, personal, or unknown |
↳ managementState | string | Current device management state |
↳ enrolledDateTime | string | Enrollment time |
↳ lastSyncDateTime | string | Last check-in time |
↳ operatingSystem | string | Operating system |
↳ osVersion | string | Operating system version |
↳ complianceState | string | Device compliance state |
↳ isEncrypted | boolean | Whether device storage is encrypted |
↳ userId | string | Primary user ID |
↳ userPrincipalName | string | Primary user principal name |
↳ userDisplayName | string | Primary user display name |
↳ emailAddress | string | User email address |
↳ azureADDeviceId | string | Microsoft Entra device ID |
↳ serialNumber | string | Device serial number |
↳ manufacturer | string | Device manufacturer |
↳ model | string | Device model |
↳ totalStorageSpaceInBytes | number | Total storage capacity in bytes |
↳ freeStorageSpaceInBytes | number | Available storage in bytes |
Read one page of detected apps from Microsoft Intune
| Parameter | Type | Required | Description |
|---|
top | number | No | Requested page size from 1 to 1000 (default: 100); ignored with nextLink |
nextLink | string | No | The nextLink from the previous response for this same operation and resource |
| Parameter | Type | Description |
|---|
nextLink | string | Continuation URL for the next page; null when this is the final page |
apps | array | List Detected Apps |
↳ id | string | Detected application ID |
↳ displayName | string | Application display name |
↳ version | string | Application version |
↳ sizeInByte | number | Application size in bytes |
↳ deviceCount | number | Number of devices with this application |
↳ publisher | string | Application publisher |
↳ platform | string | Application platform |
Read detected app details from Microsoft Intune
| Parameter | Type | Required | Description |
|---|
detectedAppId | string | Yes | Detected application ID |
| Parameter | Type | Description |
|---|
app | json | Get Detected App |
↳ id | string | Detected application ID |
↳ displayName | string | Application display name |
↳ version | string | Application version |
↳ sizeInByte | number | Application size in bytes |
↳ deviceCount | number | Number of devices with this application |
↳ publisher | string | Application publisher |
↳ platform | string | Application platform |
Read one page of managed devices that have a detected application installed
| Parameter | Type | Required | Description |
|---|
top | number | No | Requested page size from 1 to 1000 (default: 100); ignored with nextLink |
nextLink | string | No | The nextLink from the previous response for this same operation and resource |
detectedAppId | string | Yes | Detected application ID |
| Parameter | Type | Description |
|---|
nextLink | string | Continuation URL for the next page; null when this is the final page |
devices | array | List App Devices |
↳ id | string | Intune managed device ID |
↳ deviceName | string | Device name |
↳ managedDeviceOwnerType | string | Ownership: company, personal, or unknown |
↳ managementState | string | Current device management state |
↳ enrolledDateTime | string | Enrollment time |
↳ lastSyncDateTime | string | Last check-in time |
↳ operatingSystem | string | Operating system |
↳ osVersion | string | Operating system version |
↳ complianceState | string | Device compliance state |
↳ isEncrypted | boolean | Whether device storage is encrypted |
↳ userId | string | Primary user ID |
↳ userPrincipalName | string | Primary user principal name |
↳ userDisplayName | string | Primary user display name |
↳ emailAddress | string | User email address |
↳ azureADDeviceId | string | Microsoft Entra device ID |
↳ serialNumber | string | Device serial number |
↳ manufacturer | string | Device manufacturer |
↳ model | string | Device model |
↳ totalStorageSpaceInBytes | number | Total storage capacity in bytes |
↳ freeStorageSpaceInBytes | number | Available storage in bytes |
Read one page of compliance policies from Microsoft Intune
| Parameter | Type | Required | Description |
|---|
top | number | No | Requested page size from 1 to 1000 (default: 100); ignored with nextLink |
nextLink | string | No | The nextLink from the previous response for this same operation and resource |
| Parameter | Type | Description |
|---|
nextLink | string | Continuation URL for the next page; null when this is the final page |
policies | array | List Compliance Policies |
↳ id | string | Policy or configuration ID |
↳ displayName | string | Policy or configuration name |
↳ description | string | Administrator-provided description |
↳ createdDateTime | string | Creation time |
↳ lastModifiedDateTime | string | Last modification time |
↳ version | number | Policy or configuration version |
Read common metadata for an Intune compliance policy
| Parameter | Type | Required | Description |
|---|
compliancePolicyId | string | Yes | Device compliance policy ID |
| Parameter | Type | Description |
|---|
policy | json | Get Compliance Policy |
↳ id | string | Policy or configuration ID |
↳ displayName | string | Policy or configuration name |
↳ description | string | Administrator-provided description |
↳ createdDateTime | string | Creation time |
↳ lastModifiedDateTime | string | Last modification time |
↳ version | number | Policy or configuration version |
Read one page of compliance policy device statuses from Microsoft Intune
| Parameter | Type | Required | Description |
|---|
top | number | No | Requested page size from 1 to 1000 (default: 100); ignored with nextLink |
nextLink | string | No | The nextLink from the previous response for this same operation and resource |
compliancePolicyId | string | Yes | Device compliance policy ID |
| Parameter | Type | Description |
|---|
nextLink | string | Continuation URL for the next page; null when this is the final page |
deviceStatuses | array | List Compliance Policy Device Statuses |
↳ id | string | Device status record ID |
↳ deviceDisplayName | string | Device display name |
↳ userName | string | User name |
↳ deviceModel | string | Device model |
↳ status | string | Reported compliance status |
↳ lastReportedDateTime | string | Last status report time |
↳ userPrincipalName | string | User principal name |
↳ complianceGracePeriodExpirationDateTime | string | Compliance grace period expiration |
Read one page of device configurations from Microsoft Intune
| Parameter | Type | Required | Description |
|---|
top | number | No | Requested page size from 1 to 1000 (default: 100); ignored with nextLink |
nextLink | string | No | The nextLink from the previous response for this same operation and resource |
| Parameter | Type | Description |
|---|
nextLink | string | Continuation URL for the next page; null when this is the final page |
configurations | array | List Device Configurations |
↳ id | string | Policy or configuration ID |
↳ displayName | string | Policy or configuration name |
↳ description | string | Administrator-provided description |
↳ createdDateTime | string | Creation time |
↳ lastModifiedDateTime | string | Last modification time |
↳ version | number | Policy or configuration version |
Read common metadata for an Intune device configuration
| Parameter | Type | Required | Description |
|---|
configurationId | string | Yes | Device configuration ID |
| Parameter | Type | Description |
|---|
configuration | json | Get Device Configuration |
↳ id | string | Policy or configuration ID |
↳ displayName | string | Policy or configuration name |
↳ description | string | Administrator-provided description |
↳ createdDateTime | string | Creation time |
↳ lastModifiedDateTime | string | Last modification time |
↳ version | number | Policy or configuration version |
Request a device check-in to receive pending Intune policies and actions
| Parameter | Type | Required | Description |
|---|
managedDeviceId | string | Yes | Intune managed device ID (not the Microsoft Entra device ID) |
| Parameter | Type | Description |
|---|
accepted | boolean | Microsoft Intune accepted the request; device completion is asynchronous |
Request a device restart after explicit confirmation; may interrupt the signed-in user
| Parameter | Type | Required | Description |
|---|
managedDeviceId | string | Yes | Intune managed device ID (not the Microsoft Entra device ID) |
confirmAction | boolean | Yes | Explicit user confirmation to perform this disruptive device action |
| Parameter | Type | Description |
|---|
accepted | boolean | Microsoft Intune accepted the request; device completion is asynchronous |
Request a remote device lock after explicit confirmation on supported platforms
| Parameter | Type | Required | Description |
|---|
managedDeviceId | string | Yes | Intune managed device ID (not the Microsoft Entra device ID) |
confirmAction | boolean | Yes | Explicit user confirmation to perform this disruptive device action |
| Parameter | Type | Description |
|---|
accepted | boolean | Microsoft Intune accepted the request; device completion is asynchronous |
Retire a device after explicit confirmation, removing company data and management
| Parameter | Type | Required | Description |
|---|
managedDeviceId | string | Yes | Intune managed device ID (not the Microsoft Entra device ID) |
confirmAction | boolean | Yes | Explicit user confirmation to perform this disruptive device action |
| Parameter | Type | Description |
|---|
accepted | boolean | Microsoft Intune accepted the request; device completion is asynchronous |