Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
12,825 questions
401 or 403 on deviceManagement/deviceCompliancePolicies endpoint
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 44%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESR%3C/text%3E%3C/svg%3E)
Stephen Rankich
1
Reputation point
Get requests to https://graph.microsoft.com/v1.0/deviceManagement/deviceCompliancePolicies and GET /v1.0/deviceManagement/deviceEnrollmentConfigurations.
- These intune specific endpoints began having issues around 2/12-2/13 across many customers that run as application with all the appropriate permission scopes turned on and consented.
- These have worked for over a year+ and suddenly started giving forbidden/ permission errors.
- Have seen a few different posts with similar issues and there is definitely some kind of change or outage on the microsoft side.
{count} votes
-
Lu Dai-MSFT 28,441 Reputation points2022-03-03T02:25:02.92+00:00 @Stephen Rankich Thanks for posting in our Q&A.
For this issue, please make sure that you have choose the correct permissions.
https://learn.microsoft.com/en-us/graph/api/intune-deviceconfig-devicecompliancepolicy-get?view=graph-rest-1.0#prerequisites
https://learn.microsoft.com/en-us/graph/api/intune-onboarding-deviceenrollmentconfiguration-get?view=graph-rest-1.0#prerequisitesIf they have the correct permissions, but the error still occurs, it is suggested to create a Premier support ticket for this develop scope issue to get more accurate help. Here is the support link:
https://learn.microsoft.com/en-us/mem/get-support#premier-and-unified-support-customersThanks for your understanding.
Sign in to comment
Sign in to answer