Share via

Pulling Intune MDM authority using Microsoft Graph Powershell module

Mark Fleury 51 Reputation points
2022-09-18T03:14:08.543+00:00

I'm trying to find a way to pull the configured MDM Authority property that shows in the Endpoint Manager portal via Microsoft Graph using MS Graph powershell modules.

Here's the setting in the Endpoint Manager portal:
242262-image.png

The Get-MgOrganization command shows the property but doesn't actually pull the value in the v1.0 or beta endpoints:
242208-image.png

I found a Set-MgOrganizationMobileDeviceManagementAuthority command, but there doesn't seem to be a corresponding Get- command.

Using the Graph Explorer, I don't see the property even showing up in responses.

Is it possible to retrieve this setting at all from Microsoft Graph?

Microsoft Security | Intune | Other
Microsoft Security | Microsoft Graph
0 comments No comments

Answer accepted by question author

Crystal-MSFT 54,311 Reputation points Microsoft External Staff
2022-09-19T04:11:48.877+00:00

@Mark Fleury , Based on my test, I have the empty value under the mobiledevicemanagementauthority property as well.

Then I do more research and test, find we can query the information from the Graph explorer:
URL: https://graph.microsoft.com/beta/organization('your tenant id')?select=mobiledevicemanagementauthority
Request method Get
Modify permission: Need to grant "DeviceManagementServiceConfig.Read.All" and "DeviceManagementServiceConfig.ReadWrite.All" permission.
242383-image.png
Hope it can help.


If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Was this answer helpful?

0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Mark Fleury 51 Reputation points
    2022-09-19T19:47:38.723+00:00

    @Crystal-MSFT Thank you!

    Just for anyone else that runs into this, I was able to get this using the MSGraph Powershell module with this command:
    Get-MGOrganization -OrganizationId <orgid> -Property mobiledevicemanagementauthority | select mobiledevicemanagementauthority

    Was this answer helpful?

    1 person found this answer helpful.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.