Enable Intune MDM scope - mobilityManagementPolicyId ?

Question

HI Team,

While enabling MDM user scope to all users using rest API, I could see that it requires some MobilityManagementPolicyId.

How to get this id so that we can invoke API using powershell?

reference: https://learn.microsoft.com/en-us/graph/api/mobiledevicemanagementpolicies-update?view=graph-rest-beta&tabs=http

Answer 1

Hello @Krupa Gundraju (Larsen & Toubro Infotech Limit) and thanks for reaching out. To invoke the Update mobileDeviceManagementPolicy operation you will need to provide the id of a mobilityManagementPolicy object or resource. You can list available ones using the List mobileDeviceManagementPolicies operation.

You can retrieve a list of policies using MS Graph PowerShell use the following script:

   Select-MgProfile -Name "beta"  
   Connect-MgGraph -Scopes Policy.Read.All  
   Get-MgPolicyMobileDeviceManagementPolicy  

And update one passing the id property value as the MobilityManagementPolicyId param:

   Select-MgProfile -Name "beta"  
   Connect-MgGraph -Scopes Policy.ReadWrite.MobilityManagement  
   Update-MgPolicyMobileDeviceManagementPolicy -MobilityManagementPolicyId {id} # follows additional parameters  

Let us know if you need additional assistance. If the answer was helpful, please accept it and complete the quality survey so that others can find a solution.

Answer 2

@Krupa Gundraju (Larsen & Toubro Infotech Limit) Thanks for posting in our Q&A.

For this issue, I have done the test in my lab. When we run the following request URL in graph explorer, we will get two ids. One is "Device Management Policy for Microsoft Intune Enrollment", the other is "Device Management Policy for Microsoft Intune".

https://graph.microsoft.com/beta/policies/mobileDeviceManagementPolicies  

Please focus on "Device Management Policy for Microsoft Intune", it is the correct setting about Intune MDM scope.

Hope it will help.

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.