Could any one help to explain the API permission 'DeviceManagementManagedApps.ReadWrite'? In which scenario do we need this permission? why do we need this permission? We did not find any official documentation for this. any information would be appreciated. Thank you in advance BR, Kenny

Hi @ Kenny Dong I didn't find it in the Graph API Permission Reference , can you make sure spelled it correctly? If it did exist before and is not visible now, then it may be due to permission name changes, permission mergers, etc. Similar permissions are DeviceManagementApps.ReadWrite.All , DeviceManagementManagedDevices.ReadWrite.All , which are usually used to manage and configure applications and devices through Intune. Refer to the links below for more information: https://learn.microsoft.com/en-us/graph/api/intune-apps-deviceappmanagement-get?view=graph-rest-1.0&tabs=http . https://learn.microsoft.com/en-us/graph/api/intune-devices-manageddevice-list?view=graph-rest-1.0 . Hope this helps. If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment .

Could any one help to explain the API permission 'DeviceManagementManagedApps.ReadWrite'?

Kenny Dong 0

Could any one help to explain the API permission 'DeviceManagementManagedApps.ReadWrite'?

In which scenario do we need this permission?
why do we need this permission?

We did not find any official documentation for this. any information would be appreciated.

Thank you in advance

BR,

Kenny

1 answer

CarlZhao-MSFT 42,211 Reputation points

2024-07-03T02:43:50.2533333+00:00

Hi @Kenny Dong

I didn't find it in the Graph API Permission Reference, can you make sure spelled it correctly?

If it did exist before and is not visible now, then it may be due to permission name changes, permission mergers, etc.

Similar permissions are DeviceManagementApps.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All, which are usually used to manage and configure applications and devices through Intune.

Refer to the links below for more information:

https://learn.microsoft.com/en-us/graph/api/intune-apps-deviceappmanagement-get?view=graph-rest-1.0&tabs=http.

https://learn.microsoft.com/en-us/graph/api/intune-devices-manageddevice-list?view=graph-rest-1.0.

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.
Please sign in to rate this answer.
Kenny Dong 0 Reputation points

2024-07-05T08:50:36.14+00:00

Hi @CarlZhao-MSFT, **
**
Thanks for your response.

I also can not find 'DeviceManagementManagedApps.ReadWrite' in Permission Reference, but it does could be used, I also notice 'DeviceManagementApps.ReadWrite.All' but it is not the one we are using, according to the added text 'Managed', I guest it should be used to read and write data of managed apps, but 'DeviceManagementApps.ReadWrite.All' is used to read and write data of all apps. that's the differences. but I am not sure about it, so need a Microsoft Intune expert to help to explain.

BR,

Kenny

TravisGuinn 5 Reputation points Microsoft Employee

2024-07-29T15:33:13.1033333+00:00

It allows the Application to read and write the user’s data pertaining to itself in the Intune Mobile Application Management Service. This permission is typically used when configuring apps to work with Intune app protection policies, which help secure company data on mobile devices.

When you’re setting up an app with Microsoft Intune, you might need to register your app and agree to the registration terms if it will be released to a public app store. Once registered, IT administrators can apply app protection policies to the managed app1. This permission is part of the process to ensure that the app complies with the organization’s data protection policies and can be managed through Intune.

For example, during the setup of an app for Intune Mobile App Management conditional access, you would select this permission to allow the app to handle app protection policies and access conditions set by the organization2. It’s an important step in securing enterprise mobile applications and managing them effectively.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Could any one help to explain the API permission 'DeviceManagementManagedApps.ReadWrite'?

1 answer

Your answer