Pulling Intune MDM authority using Microsoft Graph Powershell module

Mark Fleury 51 Reputation points
2022-09-18T03:14:08.543+00:00

I'm trying to find a way to pull the configured MDM Authority property that shows in the Endpoint Manager portal via Microsoft Graph using MS Graph powershell modules.

Here's the setting in the Endpoint Manager portal:
242262-image.png

The Get-MgOrganization command shows the property but doesn't actually pull the value in the v1.0 or beta endpoints:
242208-image.png

I found a Set-MgOrganizationMobileDeviceManagementAuthority command, but there doesn't seem to be a corresponding Get- command.

Using the Graph Explorer, I don't see the property even showing up in responses.

Is it possible to retrieve this setting at all from Microsoft Graph?

Microsoft Security | Intune | Other
Microsoft Security | Microsoft Graph
0 comments No comments
{count} votes

Answer accepted by question author
  1. Crystal-MSFT 54,201 Reputation points Microsoft External Staff
    2022-09-19T04:11:48.877+00:00

    @Mark Fleury , Based on my test, I have the empty value under the mobiledevicemanagementauthority property as well.

    Then I do more research and test, find we can query the information from the Graph explorer:
    URL: https://graph.microsoft.com/beta/organization('your tenant id')?select=mobiledevicemanagementauthority
    Request method Get
    Modify permission: Need to grant "DeviceManagementServiceConfig.Read.All" and "DeviceManagementServiceConfig.ReadWrite.All" permission.
    242383-image.png
    Hope it can help.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Mark Fleury 51 Reputation points
    2022-09-19T19:47:38.723+00:00

    @Crystal-MSFT Thank you!

    Just for anyone else that runs into this, I was able to get this using the MSGraph Powershell module with this command:
    Get-MGOrganization -OrganizationId <orgid> -Property mobiledevicemanagementauthority | select mobiledevicemanagementauthority

    1 person found this answer helpful.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.