Pulling Intune MDM authority using Microsoft Graph Powershell module

Mark Fleury 46 Reputation points
2022-09-18T03:14:08.543+00:00

I'm trying to find a way to pull the configured MDM Authority property that shows in the Endpoint Manager portal via Microsoft Graph using MS Graph powershell modules.

Here's the setting in the Endpoint Manager portal:
242262-image.png

The Get-MgOrganization command shows the property but doesn't actually pull the value in the v1.0 or beta endpoints:
242208-image.png

I found a Set-MgOrganizationMobileDeviceManagementAuthority command, but there doesn't seem to be a corresponding Get- command.

Using the Graph Explorer, I don't see the property even showing up in responses.

Is it possible to retrieve this setting at all from Microsoft Graph?

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
11,775 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,936 questions
0 comments No comments
{count} votes

Accepted answer
  1. Crystal-MSFT 47,536 Reputation points Microsoft Vendor
    2022-09-19T04:11:48.877+00:00

    @Mark Fleury , Based on my test, I have the empty value under the mobiledevicemanagementauthority property as well.

    Then I do more research and test, find we can query the information from the Graph explorer:
    URL: https://graph.microsoft.com/beta/organization('your tenant id')?select=mobiledevicemanagementauthority
    Request method Get
    Modify permission: Need to grant "DeviceManagementServiceConfig.Read.All" and "DeviceManagementServiceConfig.ReadWrite.All" permission.
    242383-image.png
    Hope it can help.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Mark Fleury 46 Reputation points
    2022-09-19T19:47:38.723+00:00

    @Crystal-MSFT Thank you!

    Just for anyone else that runs into this, I was able to get this using the MSGraph Powershell module with this command:
    Get-MGOrganization -OrganizationId <orgid> -Property mobiledevicemanagementauthority | select mobiledevicemanagementauthority


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.