This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(76.8, 20%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJL%3C/text%3E%3C/svg%3E)
Hi,
I'm trying to pull information on devices encryption state using the Powershell SDK and Get-MgDeviceManagementManagedDeviceEncryptionState. However, using it (after doing both Install-Module Microsoft.Graph.DeviceManagement and Import-Module Microsoft.Graph.DeviceManagement) yields the following result:
Get-MgDeviceManagementManagedDeviceEncryptionState : The term 'Get-MgDeviceManagementManagedDeviceEncryptionState' is not recognized as the name of a cmdlet, function, script file, or operable program.
What am I missing? I'm unable to find another way to retrieve this information.
Connect-MgGraph and Get-MgDevice both work fine, and it seems that this cmdlet should exist according to https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.devicemanagement/get-mgdevicemanagementmanageddeviceencryptionstate?view=graph-powershell-beta
Try switching to the beta version first, as the cmdlet is only available therein:
Select-MgProfile beta
Get-MgDeviceManagementManagedDeviceEncryptionState
Double post.
Thanks Vasil! That seems to help that. Even though I run with the following scopes (see below), I seem to get an error though. Do you also know what scope is needed to use that cmdlet?
Connect-MgGraph -Scopes "Device.Read.All","DeviceManagementConfiguration.Read.All"
Runs fine here with the DeviceManagementConfiguration.Read.All scope. Make sure you obtain a fresh token after you consent to the permissions, Get-MgContext will give you the current scopes.
Thanks, everything looks OK from what I can see but I get this error?
Looks like some issue on the backend. Have you tried querying the endpoint directly via the Graph explorer, does it work fine there?
I get the same error in the Graph Explorer, but maybe I'm writing the query incorrectly?
I tried with a superuser and it's definitely a rights-issue. I've requested access using my account when running the below (which has been accepted):
Connect-MgGraph -Scopes "Device.Read.All","DeviceManagementConfiguration.Read.All"
Is there somewhere from within Azure you can check the rights for accessing Graph using an account (not app) via Powershell? I reckon the easiest way to verify what rights are assigned to the user would be directly from within Azure.
Make sure your user has the relevant permissions assigned in MEM. There is nothing required specifically for PowerShell - the permissions you will have therein are the cross-section of the permissions granted to the app (DeviceManagementConfiguration.Read.All is more than sufficient here) and those of the user executing the cmdlet.
Thank you so much, I gave it the "Read-only operator"-role in Intune and it now works, finally. Thanks for all the help (and going beyond the original question).