How to assign a group to a device configuration?

Question

How to assign a group to a device configuration?

Shannon Hagmaier 20 Microsoft Employee

In C# I am using the graph sdk to create a device configuration and I am trying to assign it to a security group but keep getting an OData error message. I am following the instructions from this link: https://learn.microsoft.com/en-us/graph/api/intune-deviceconfig-deviceconfiguration-assign?view=graph-rest-1.0&tabs=csharp . Is there any other way to assign a group to a device configuration that was successfully created?

Answer accepted by question author

0 additional answers

Your answer

Answer 1

Anonymous

Hello Shannon Hagmaier,

Thank you for reaching out to Microsoft Support!

Graph API only provides the endpoint for assign device configuration, you can share your code and error information, we will help you further, or you can assign in Intune, the reference document is as follows:

https://learn.microsoft.com/en-us/mem/intune/configuration/device-profiles

Hope this helps.

If the answer is helpful, please click Accept Answer and kindly upvote it. If you have any further questions about this answer, please click Comment.

Shannon Hagmaier 20 Reputation points Microsoft Employee

2025-01-06T12:29:43.2666667+00:00

Hi @Anonymous thank you for the response. To confirm, to assign a group I have to use the endpoint directly instead of using the sdk?
Anonymous

2025-01-07T08:30:44.2233333+00:00

The use of Graph SDK is supported, for your problem, it may be the problem of getting tokens or calling procedures, hope you share your error information and code, we will further help you solve the problem.
Shannon Hagmaier 20 Reputation points Microsoft Employee

2025-01-07T12:57:53+00:00

Ok great that is what I was trying, the error message that I am getting is

$exception {"{\r\n "_version": 3,\r\n "Message": "An error has occurred - Operation ID (for customer support): 00000000-0000-0000-0000-000000000000 - Activity ID: 885aec95-0b30-4b29-8092-17e1f3bd0579 - Url: https://fef.amsua0102.manage.microsoft.com/DeviceConfiguration_2412/StatelessDeviceConfigurationFEService/deviceManagement/deviceConfigurations('config_id')/microsoft.management.services.api.assign?api-version=2022-06-13\",\r\n "CustomApiErrorPhrase": "",\r\n "RetryAfter": null,\r\n "ErrorSourceService": "",\r\n "HttpHeaders": "{}"\r\n}"} Microsoft.Graph.Models.ODataErrors.ODataError

since it said that it was an OData error I tried to set the ODataType of the ConfiguationManagerCollectionAssignmentTarget to "microsoft.graph.configurationManagerCollectionAssignmentTarget" as was in the documentation and also "#microsoft.graph.configurationManagerCollectionAssignmentTarget" but was getting the same error both ways
Shannon Hagmaier 20 Reputation points Microsoft Employee

2025-01-07T13:00:18.7+00:00

Ok great that is what I was trying to use. The error that I am getting is

$exception {"{\r\n "_version": 3,\r\n "Message": "An error has occurred - Operation ID (for customer support): 00000000-0000-0000-0000-000000000000 - Activity ID: 885aec95-0b30-4b29-8092-17e1f3bd0579 - Url: https://fef.amsua0102.manage.microsoft.com/DeviceConfiguration_2412/StatelessDeviceConfigurationFEService/deviceManagement/deviceConfigurations('config_id')/microsoft.management.services.api.assign?api-version=2022-06-13\",\r\n "CustomApiErrorPhrase": "",\r\n "RetryAfter": null,\r\n "ErrorSourceService": "",\r\n "HttpHeaders": "{}"\r\n}"} Microsoft.Graph.Models.ODataErrors.ODataError

Since it says that it is an ODataError I had tried setting the ODataType of the ConfigurationManagerCollectionAssignmentTarget to "microsoft.graph.configurationManagerCollectionAssignmentTarget" as is in the documentation and also "#microsoft.graph.configurationManagerCollectionAssignmentTarget" but was getting the same error both ways.

Anonymous

Since you assign the object of the group, therefore, that you create a target object classes used should be GroupAssignmentTarget, rather than ConfigurationManagerCollectionAssignmentTarget.

My test code is shown below for your reference:

var requestBody = new AssignPostRequestBody
{
    Assignments = new List<DeviceConfigurationAssignment>
    {
        new DeviceConfigurationAssignment
        {
            OdataType = "#microsoft.graph.deviceConfigurationAssignment",
            Id = "Your_ID",
            Target = new GroupAssignmentTarget
            {
                OdataType = "#microsoft.graph.groupAssignmentTarget",
                GroupId = "Group_Id",
            },
        },
    },
};

Shannon Hagmaier 20 Reputation points Microsoft Employee

2025-01-08T19:22:01.54+00:00

Thanks so much, changing it to GroupAssignmentTarget seems to have worked. One other question that I had was, is it possible to also exclude a group using the sdk?
Anonymous

2025-01-09T06:27:54.9433333+00:00

You're so welcome! I'm happy that your issue has been taken care of. If you need exclude a group using the delete endpoint, see this document for details:

https://learn.microsoft.com/en-us/graph/api/intune-deviceconfig-deviceconfigurationassignment-delete?view=graph-rest-1.0&tabs=csharp
Shannon Hagmaier 20 Reputation points Microsoft Employee

2025-01-09T13:35:41.4233333+00:00

I saw that endpoint which looks like it is used to delete a group assignment from the configuration instead of adding an exclusion group. I was however able to assign a ExclusionGroupAssignmentTarget to get what I needed. Thanks
Shannon Hagmaier 20 Reputation points Microsoft Employee

2025-01-09T13:36:41.97+00:00

I saw that endpoint which looks like it is used to remove a group assignment from a configuration rather than add an exclusion group. I was however able to get what I needed by assigning a ExclusionGroupAssignmentTarget. Thanks
Anonymous

2025-01-10T06:28:22.8+00:00

I'm happy that your issue has been taken care of. Please don't forget to click "Accept Answer", which may help members with similar questions find the answer easily. Thank you very much!

Share via

How to assign a group to a device configuration?

0 additional answers

Your answer