Intune Data Warehouse Collections
The following Intune Data Warehouse collections provides the properties, descriptions, and examples for v1.0 collections of the Data Warehouse API entities.
appRevisions
The appRevision entity lists all the versions of apps.
| Property | Description | Example |
|---|---|---|
| appKey | Unique identifier of the App. | 123 |
| applicationId | Unique identifier of the App - similar to AppKey, but this key is a natural. | b66bc706-ffff-7437-0340-032819502773 |
| revision | The version as mentioned by admin during uploading of the binary. | 2 |
| title | Title of the app. | Excel |
| publisher | Publisher of the app. | Microsoft |
| uploadState | Upload state of the app. | 1 |
| appTypeKey | Reference to AppType described in the following section. | 1 |
| vppProgramTypeKey | Reference to VppProgramType described below. | 30876 |
| creationTime | The time when this revision was created. | 11/23/2016 0:00 |
| modifiedTime | Last time anything related to this revision was changed. | 11/23/2016 0:00 |
| size | Size of the binary in bytes. | 120,392,000 |
| startDateInclusiveUTC | Date and time in UTC when this App revision was created in the data warehouse. | 11/23/2016 0:00 |
| endDateExclusiveUTC | Date and time in UTC when this app revision became obsolete. | 11/23/2016 0:00 |
| isCurrent | Indicates whether this App version is current or not in the data warehouse. | True/False |
| rowLastModifiedDateTimeUTC | Date and time in UTC when this app version was last modified in the data warehouse. | 11/23/2016 0:00 |
appTypes
The appType entity lists the installation source of an app.
Note
Win32 apps are not included in the Intune Data Warehouse.
| Property | Description |
|---|---|
| appTypeID | ID for the type |
| appTypeKey | Surrogate key for the key |
| appTypeName | App type |
Example
| AppTypeID | Name | Description |
|---|---|---|
| 0 | Android store app | An Android store app. |
| 1 | Android LOB app | An Android line-of-business app. |
| 2 | Managed Android store app (MAM) | An Android store app that has management enabled. |
| 3 | iOS store app | An iOS store app. |
| 4 | iOS LOB app | An iOS line-of-business app. |
| 5 | Managed iOS store app (MAM) | An iOSstore app that is management enabled. |
| 6 | Microsoft 365 Apps for enterprise | The Microsoft 365 Apps for Windows 10. |
| 7 | Web app | A web app. |
| 8 | Windows Phone 8.1 store app | A Windows phone 8.1 store app. |
| 9 | Windows store app | A Windows store app. |
| 10 | Windows LOB apps | A Windows AppX line-of-business app. |
| 11 | Windows Mobile MSI | An MSI line-of-business app. |
| 12 | Windows Phone LOB app | A Windows phone line-of-business app. |
compliancePolicyStatusDeviceActivities
The following table summarizes the assignment status of compliance policies to devices. It lists the count of devices found in each compliance state.
| Property | Description | Example |
|---|---|---|
| dateKey | Date key when the summary was created for the compliance policy. | 20161204 |
| unknown | Number of devices that are offline or failed to communicate with Intune or Microsoft Entra ID for other reasons. | 5 |
| notApplicable | Number of devices where device compliance policies targeted by the admin are not applicable. | 201 |
| compliant | Number of devices that successfully applied one or more device compliance policies targeted by the admin. | 4083 |
| inGracePeriod | Number of devices that are not compliant but that are in the grace-period defined by the admin. | 57 |
| nonCompliant | Number of devices that failed to apply one or more device compliance policies targeted by the admin or where the user hasn't complied with the policies targeted by the admin. | 43 |
| error | Number of devices that failed to communicate with Intune or Microsoft Entra ID, and returned an error message. | 3 |
compliancePolicyStatusDevicePerPolicyActivities
The following table summarizes the assignment status of compliance policies to devices on a per policy and a per policy type basis. It lists the count of devices found in each compliance state for each assigned compliance policy.
| Property | Description | Example |
|---|---|---|
| dateKey | Date key when the summary was created for the compliance policy. | 20161219 |
| policyKey | Key for the compliance policy for which the summary was created. | 10178 |
| policyPlatformKey | Key for the platform type of the compliance policy for which the summary was created. | 5 |
| unknown | Number of devices that are offline or failed to communicate with Intune or Microsoft Entra ID for other reasons. | 13 |
| notApplicable | Number of devices where device compliance policies targeted by the admin are not applicable. | 3 |
| compliant | Number of devices that successfully applied one or more device compliance policies targeted by the admin. | 45 |
| inGracePeriod | Number of devices that are not compliant but that are in the grace-period defined by the admin. | 3 |
| nonCompliant | Number of devices that failed to apply one or more device compliance policies targeted by the admin or where the user hasn't complied with the policies targeted by the admin. | 7 |
| error | Number of devices that failed to communicate with Intune or Microsoft Entra ID, and returned an error message. | 3 |
complianceStates
| Property | Description |
|---|---|
| complianceStatus | Compliance status of devices with mdmStatusKey |
| complianceStateKey | Compliance key to match device and compliance status |
| complianceStateID | The ID to match this compliance state |
Example
| complianceStatus | Description |
|---|---|
| Unknown | Unknown. |
| Compliant | Compliant. |
| Noncompliant | Device is non-compliant and is blocked from corporate resources. |
| Conflict | Conflict with other rules. |
| Error | Error. |
| ConfigManager | Managed by Config Manager. |
| InGracePeriod | Device is non-compliant but still has access to corporate resources |
dates
The date entity represents dates that are referenced across multiple data warehouse entities.
| Property | Description | Example |
|---|---|---|
| dateKey | Unique identifier for this date in the data warehouse. | 20160703 |
| fullDate | This date represented in full Date/Time format. | 7/3/2016 0:00 |
| dayOfWeek | Day of week | 1 |
| dayOfMonth | Day of month | 3 |
| dayOfYear | Day of year | 185 |
| weekOfYear | Week of year | 28 |
| monthOfYear | Month of the year | 7 |
| calendarQuarter | Calendar quarter | 3 |
| calendarYear | Calendar year | 2016 |
| dateKey | Unique identifier for this date in the data warehouse. | 20160703 |
| fullDate | This date represented in full Date/Time format. | 7/3/2016 0:00 |
| dayOfWeek | Day of week | 1 |
| dayOfMonth | Day of month | 3 |
| dayOfYear | Day of year | 185 |
| weekOfYear | Week of year | 28 |
| monthOfYear | Month of the year | 7 |
| calendarQuarter | Calendar quarter | 3 |
| calendarYear | Calendar year | 2016 |
deviceCategories
| Property | Description | Example |
|---|---|---|
| deviceCategoryID | Unique identifier for the device category. | fb415ba2-7c08-41f6-a5e5-685b50da2c4c |
| deviceCategoryKey | Unique identifier of the device category in the data warehouse - surrogate key | 1 |
| deviceCategoryName | Display name for the device category. | Smartphones |
deviceConfigurationProfileDeviceActivities
The DeviceConfigurationProfileDeviceActivity entity lists the number of devices in the succeeded, pending, failed, or error state per day. The number reflects the Device configuration profiles assigned to the entity. For example, if a device is in the succeeded state for all its assigned policies, it increments the succeeded counter up one for that day. If a device has two profiles assigned to it, one in the succeeded state and another in an error state, the entity increments the Succeeded counter and place the device in the error state. The entity lists how many devices are in which state on a given day over the last 30 days.
| Property | Description | Example |
|---|---|---|
| dateKey | Date Key when the Device Configuration Profile check-in was recorded in the data warehouse. | 20160703 |
| pending | Number of unique Devices in pending state. | 123 |
| succeeded | Number of unique Devices in success state. | 12 |
| error | Number of unique Devices in error state. | 10 |
| failed | Number of unique Devices in failed state. | 2 |
deviceConfigurationProfileUserActivities
The DeviceConfigurationProfileUserActivity entity lists the number of users in the succeeded, pending, failed, or error state per day. The number reflects the Device configuration profiles assigned to the entity. For example, if a user is in the succeeded state for all their assigned policies, it moves up the succeeded counter by one for that day. If a user has two profiles assigned to them, one in the succeeded state and the other is in an error state, the user in the error state is counted. The DeviceConfigurationProfileUserActivity entity lists how many users are in which state on a given day over the last 30 days.
| Property | Description | Example |
|---|---|---|
| dateKey | Date Key when the Device Configuration Profile check-in was recorded in the data warehouse. | 20160703 |
| pending | Number of unique Users in pending state. | 123 |
| succeeded | Number of unique Users in success state. | 12 |
| error | Number of unique Users in error state. | 10 |
| failed | Number of unique Users in failed state. | 2 |
devicePropertyHistories
| Property | Description |
|---|---|
| dateKey | Reference to date table indicating the day. |
| deviceKey | Unique identifier of the device in the data warehouse - surrogate key. This is a reference to the Device table that contains the Intune device ID. |
| deviceName | Name of the device on platforms that allow naming a device. On other platforms, Intune creates a name from other properties. This attribute cannot be available for all devices. |
| deviceRegistrationStateKey | Key of the device registration state attribute for this device. |
| ownerTypeKey | Key of the owner type attribute for this device: corporate, personal, or unknown. |
| managementStateKey | Key of the management state associated with this device, indicating latest state of a remote action or if it was jailbroken/rooted. |
| azureADRegistered | Whether the device is Microsoft Entra registered. |
| complianceStateKey | A key to ComplianceState. |
| oSVersion | OS version. |
| jailBroken | Whether the device is jail broken or rooted. |
| deviceCategoryKey | Key of device category attribute for this device. |
| physicalMemoryInBytes | The physical memory in bytes. |
| totalStorageSpaceInBytes | Total storage capacity in bytes. |
deviceRegistrationStates
The DeviceRegistrationState entity represents the registration type referenced by other data warehouse collections.
| Property | Description |
|---|---|
| deviceRegistrationStateID | Unique identifier for registration state |
| deviceRegistrationStateKey | Unique identifier of the registration state in the data warehouse - surrogate key |
| deviceRegistrationStateName | Registration state |
| notRegistered | Not registered |
| registered | Registered |
| revoked | State means the IT administrator has blocked the client, and the client can be unblocked. A device can also be in the Revoked state after it is wiped or retired. |
| keyConflict | Key conflict |
| approvalPending | Approval pending |
| certificateReset | Reset certificate |
| notRegisteredPendingEnrollment | Not registered pending enrollment |
| unknown | Unknown state |
devices
The device entity lists all enrolled devices under management and their corresponding properties.
| Property | Description |
|---|---|
| deviceKey | Unique identifier of the device in the data warehouse - surrogate key. |
| deviceId | Unique identifier of the device. |
| deviceName | Name of the device on platforms that allow naming a device. On other platforms, Intune creates a name from other properties. This attribute cannot be available for all devices. |
| deviceTypeKey | Key of the device type attribute for this device. |
| deviceRegistrationState | Key of the client registration state attribute for this device. |
| ownerTypeKey | Key of the owner type attribute for this device: corporate, personal, or unknown. |
| enrolledDateTime | Date and time that this device was enrolled. |
| ethernetMacAddress | The unique network identifier of this device. |
| lastSyncDateTime | Last known device check-in with Intune. |
| managementAgentKey | Key of the management agent associated with this device. |
| managementStateKey | Key of the management state associated with this device, indicating latest state of a remote action or if it was jailbroken/rooted. |
| azureADDeviceId | The Azure deviceID for this device. |
| azureADRegistered | Whether the device is Microsoft Entra registered. |
| deviceCategoryKey | Key of the category associated with this device. |
| deviceEnrollmentType | Key of the enrollment type associated with this device, indicating method of enrollment. |
| complianceStateKey | Key of the Compliance state associated with this device. |
| office365Version | The version of Microsoft 365 that is installed on the device. |
| oSVersion | Operating system version of the device. |
| easDeviceId | Exchange ActiveSync ID of the device. |
| serialNumber | SerialNumber |
| userId | Unique Identifier for the user associated with the device. |
| rowLastModifiedDateTimeUTC | Date and time in UTC when this device was last modified in the data warehouse. |
| manufacturer | Manufacturer of the device |
| model | Model of the device |
| operatingSystem | Operating system of the device. Windows, iOS/iPadOS, etc. |
| isDeleted | Binary to show whether the device is deleted or not. |
| androidSecurityPatchLevel | Android security patch level |
| mEID | MEID |
| isSupervised | Device supervised status |
| freeStorageSpaceInBytes | Free Storage in bytes. |
| encryptionState | Encryption state on the device. |
| subscriberCarrier | Subscriber carrier of the device |
| phoneNumber | Phone number of the device |
| iMEI | IMEI |
| cellularTechnology | Cellular technology of the device. |
| wiFiMacAddress | Wi-Fi MAC. |
| windowsOsEdition | Windows Operating System edition. |
Note
For more information about Windows SKU enum values, see Device properties.
deviceTypes
The deviceType entity represents the device type referenced by other data warehouse entities. The device type typically describes either the device model, manufacturer, or a combination of both.
| Property | Description |
|---|---|
| deviceTypeID | Unique identifier of the device type |
| deviceTypeKey | Unique identifier of the device type in the data warehouse - surrogate key |
| deviceTypeName | Device type |
Example
| deviceTypeID | Name | Description |
|---|---|---|
| -1 | Not Available | The device type is unavailable. |
| 0 | Desktop | Windows Desktop device |
| 1 | Windows | Windows device |
| 2 | WinMO6 | Windows Mobile 6.0 device |
| 3 | Nokia | Nokia device |
| 4 | WindowsPhone | Windows Phone device |
| 5 | Mac | Mac device |
| 6 | WinCE | Windows CE device |
| 7 | WinEmbedded | Windows Embedded device |
| 8 | IPhone | iPhone device |
| 9 | IPad | iPad device |
| 10 | IPod | iPod device |
| 11 | Android | Android device-managed using Device Administrator |
| 12 | ISocConsumer | iSoc Consumer device |
| 13 | Unix | Unix Device |
| 14 | MacMDM | OS X device managed with the built-in MDM agent |
| 15 | HoloLens | HoloLens device |
| 16 | SurfaceHub | Surface Hub device |
| 17 | AndroidForWork | Android device-managed using Android Profile Owner |
| 18 | AndroidEnterprise | Android enterprise device. |
| 100 | Blackberry | Blackberry Device |
| 101 | Palm | Palm device |
| 255 | Unknown | Unknown device type |
deviceEnrollmentTypes
The deviceEnrollmentType entity indicates how a device was enrolled. The enrollment type captures the method of enrollment. Examples list the different enrollment types and what they mean.
| Property | Description |
|---|---|
| deviceEnrollmentTypeID | Unique identifier of the enrollment type. |
| deviceEnrollmentTypeKey | Unique identifier of the enrollment type in the data warehouse - surrogate key. |
| deviceEnrollmentTypeName | Enrollment type name. |
Example
| enrollmentTypeID | Name | Description |
|---|---|---|
| 0 | Unknown | Enrollment type was not collected |
| 1 | UserEnrollment | User driven enrollment through BYOD channel. |
| 2 | DeviceEnrollmentManager | User enrollment with a device enrollment manager account. |
| 3 | AppleBulkWithUser | Apple bulk enrollment with user challenge. (DEP, Apple Configurator) |
| 4 | AppleBulkWithoutUser | Apple bulk enrollment without user challenge. (DEP, Apple Configurator, Mobile Config) |
| 5 | WindowsAzureADJoin | Windows 10 Microsoft Entra join. |
| 6 | WindowsBulkUserless | Windows 10 Bulk enrollment through ICD with certificate. |
| 7 | WindowsAutoEnrollment | Windows 10 automatic enrollment. (Add work account) |
| 8 | WindowsBulkAzureDomainJoin | Windows 10 bulk Microsoft Entra join. |
| 9 | WindowsCoManagement | Windows 10 co-management triggered by Autopilot or Group Policy. |
| 10 | WindowsAzureADJoinsUsingDeviceAuth | Windows 10 Microsoft Entra join using Device Auth. |
enrollmentActivities
The EnrollmentActivity entity indicates the activity of a device enrollment.
| Property | Description |
|---|---|
| dateKey | Key of the date when this enrollment activity was recorded. |
| deviceEnrollmentTypeKey | Key of the type of the enrollment. |
| deviceTypeKey | Key of the type of device. |
| enrollmentEventStatusKey | Key of the status indicating the success or failure of the enrollment. |
| enrollmentFailureCategoryKey | Key of the enrollment failure category (if the enrollment failed). |
| enrollmentFailureReasonKey | Key of the enrollment failure reason (if the enrollment failed). |
| osVersion | The operating system version of the device. |
| count | Total count of enrollment activities matching the classifications above. |
enrollmentEventStatuses
The EnrollmentEventStatus entity indicates the result of a device enrollment.
| Property | Description |
|---|---|
| enrollmentEventStatusKey | Unique identifier of the enrollment status in the data warehouse (surrogate key) |
| enrollmentEventStatusName | The name of the enrollment status. See examples below. |
Example
| enrollmentEventStatusName | Description |
|---|---|
| Success | A successful device enrollment |
| Failed | A failed device enrollment |
| Not Available | The enrollment status is unavailable. |
enrollmentFailureCategories
The EnrollmentFailureCategory entity indicates why a device enrollment failed.
| Property | Description |
|---|---|
| enrollmentFailureCategoryKey | Unique identifier of the enrollment failure category in the data warehouse (surrogate key) |
| enrollmentFailureCategoryName | The name of the enrollment failure category. See examples below. |
Example
| enrollmentFailureCategoryName | Description |
|---|---|
| Not Applicable | The enrollment failure category is not applicable. |
| Not Available | The enrollment failure category is not available. |
| Unknown | Unknown error. |
| Authentication | Authentication failed. |
| Authorization | Call was authenticated, but not authorized to enroll. |
| AccountValidation | Failed to validate the account for enrollment. (Account blocked, enrollment not enabled) |
| UserValidation | User could not be validated. (User does not exist, missing license) |
| DeviceNotSupported | Device is not supported for mobile device management. |
| InMaintenance | Account is in maintenance. |
| BadRequest | Client sent a request that is not understood/supported by the service. |
| FeatureNotSupported | Feature(s) used by this enrollment are not supported for this account. |
| EnrollmentRestrictionsEnforced | Enrollment restrictions configured by admin blocked this enrollment. |
| ClientDisconnected | Client timed out or enrollment was aborted by end user. |
| UserAbandonment | Enrollment was abandoned by end user. (End user started onboarding but failed to complete it in timely manner) |
enrollmentFailureReasons
The EnrollmentFailureReason entity indicates a more detailed reason for a device enrollment failure within a given failure category.
| Property | Description |
|---|---|
| enrollmentFailureReasonKey | Unique identifier of the enrollment failure reason in the data warehouse (surrogate key) |
| enrollmentFailureReasonName | The name of the enrollment failure reason. See examples below. |
Example
| enrollmentFailureReasonName | Description |
|---|---|
| Not Applicable | The enrollment failure reason is not applicable. |
| Not Available | The enrollment failure reason is not available. |
| Unknown | Unknown Error. |
| UserNotLicensed | The user was not found in Intune or does not have a valid license. |
| UserUnknown | User is not known to Intune. |
| BulkAlreadyEnrolledDevice | Only one user can enroll a device. This device was previously enrolled by another user. |
| EnrollmentOnboardingIssue | Intune mobile device management (MDM) authority is not configured yet. |
| AppleChallengeIssue | The iOS management profile installation was delayed or failed. |
| AppleOnboardingIssue | An Apple MDM push certificate is required to enroll into Intune. |
| DeviceCap | The user attempted to enroll more devices than maximum allowed. |
| AuthenticationRequirementNotMet | Intune enrollment service failed to authorize this request. |
| UnsupportedDeviceType | This device does not meet minimum requirements for Intune enrollment. |
| EnrollmentCriteriaNotMet | This device failed to enroll due to a configured enrollment restriction rule. |
| BulkDeviceNotPreregistered | This device's international mobile equipment identifier (IMEI) or serial number wasn't found. Without this identifier, devices are recognized as personal-owned devices which are currently blocked. |
| FeatureNotSupported | The user was attempting to access a feature that is not yet released for all customers or is not compatible with your Intune configuration. |
| UserAbandonment | Enrollment was abandoned by end user. (End user started onboarding but failed to complete it in timely manner) |
| APNSCertificateExpired | Apple devices cannot be managed with an expired Apple MDM push certificate. |
intuneManagementExtensions
The intuneManagementExtension lists the intuneManagementExtension health on each Windows 10 device per day. The data is retained for the last 60 days.
| Property | Description | Example |
|---|---|---|
| dateKey | Unique identifier of the Date. | 123 |
| tenantKey | Unique identifier of the Tenant. | 456 |
| deviceKey | Unique identifier of the Device. | 789 |
| extensionVersionKey | Unique identifier of the IntuneManagementExtension version. | 1 |
| extensionStateKey | Unique identifier of health state. | 2 |
intuneManagementExtensionHealthStates
The IntuneManagementExtensionHealthState lists all possible health states of the IntuneManagementExtension.
| Property | Description | Example |
|---|---|---|
| extensionStateKey | Unique identifier of health state. | 2 |
| extensionState | Health state of a IntuneManagementExtension. | Healthy |
intuneManagementExtensionVersions
The IntuneManagementExtensionVersion entity lists all the versions used by IntuneManagementExtension.
| Property | Description | Example |
|---|---|---|
| extensionVersionKey | Unique identifier of the IntuneManagementExtension version. | 1 |
| extensionVersion | The 4 digit version number. | 1.0.2.0 |
MamApplications
The MamApplication entity lists Line-of-Business (LOB) apps that are managed through Mobile Application Management (MAM) without enrollment in your enterprise.
| Property | Description | Example |
|---|---|---|
| mamApplicationKey | Unique identifier of the MAM application. | 432 |
| mamApplicationName | Name of the MAM application. | MAM Application Example Name |
| mamApplicationId | Application ID of the MAM application. | 123 |
| isDeleted | Indicates whether this MAM app record has been updated. True- MAM app has a new record with updated fields in this table. False- the latest record for this MAM app. |
True/False |
| startDateInclusiveUTC | Date and time in UTC when this MAM app was created in the data warehouse. | 11/23/2016 12:00:00 AM |
| deletedDateUTC | Date and time in UTC when IsDeleted changed to True. | 11/23/2016 12:00:00 AM |
| rowLastModifiedDateTimeUTC | Date and time in UTC when this MAM app was last modified in the data warehouse. | 11/23/2016 12:00:00 AM |
MamApplicationInstances
The MamApplicationInstance entity lists managed Mobile Application Management (MAM) apps as singular instances per user per device. All users and devices listed with in the entity are protected, as in, they have at least one MAM Policy assigned to them.
| Property | Description | Example |
|---|---|---|
| applicationInstanceKey | Unique identifier of the MAM app instance in the data warehouse - surrogate key. | 123 |
| userId | User ID of the user who has this MAM app installed. | b66bc706-ffff-7437-0340-032819502773 |
| applicationInstanceId | Unique identifier of the MAM app instance - similar to ApplicationInstanceKey, but the identifier is a natural key. | b66bc706-ffff-7437-0340-032819502773 |
| mamApplicationId | Application ID of the Mam Application for which this Mam Application Instance was created. | 11/23/2016 12:00:00 AM |
| applicationVersion | Application version of this MAM app. | 2 |
| createdDate | Date when this record of the MAM app instance was created. Value can be null. | 11/23/2016 12:00:00 AM |
| platform | Platform of the device on which this MAM app is installed. | 2 |
| platformVersion | Platform version of the device on which this MAM app is installed. | 2.2 |
| sdkVersion | The MAM SDK version that this MAM app was wrapped with. | 3.2 |
| mamDeviceId | Device ID of the device with which MAM Application Instance is associated with. | 11/23/2016 12:00:00 AM |
| mamDeviceType | Device type of the device with which MAM Application Instance is associated with. | 11/23/2016 12:00:00 AM |
| mamDeviceName | Device name of the device with which MAM Application Instance is associated with. | 11/23/2016 12:00:00 AM |
| isDeleted | Indicates whether this MAM app instance record has been updated. True- this MAM app instance has a new record with updated fields in this table. False - the latest record for this MAM app instance. |
True/False |
| startDateInclusiveUtc | Date and time in UTC when this MAM app instance was created in the data warehouse. | 11/23/2016 12:00:00 AM |
| deletedDateUtc | Date and time in UTC when IsDeleted changed to True. | 11/23/2016 12:00:00 AM |
| rowLastModifiedDateTimeUtc | Date and time in UTC when this MAM app instance was last modified in the data warehouse. | 11/23/2016 12:00:00 AM |
MamCheckins
The MamCheckin entity represents data gathered when a Mobile Application Management (MAM) app instance has checked in with the Intune Service.
Note
When an app instance checks in multiple times a day, the data warehouse stores it as single check-in.
| Property | Description | Example |
|---|---|---|
| dateKey | Date Key when the MAM app check-in was recorded in the data warehouse. | 20160703 |
| applicationInstanceKey | Key of the app instance associated with this MAM app check-in. | 123 |
| userKey | Key of the user associated with this MAM app check-in. | 4323 |
| mamApplicationKey | Application Key of Application associated with MAM Application check in. | 432 |
| deviceHealthKey | Key of DeviceHealth associated with this MAM app check-in. | 321 |
| platformKey | Represents the platform of the device associated with this MAM app check-in. | 123 |
| lastCheckInDate | Date and time when this MAM app last checked in. Value can be null. | 11/23/2016 12:00:00 AM |
MamDeviceHealths
The MamDeviceHealth entity represents devices that have Mobile Application Management (MAM) policies deployed to them even if they are jailbroken.
| Property | Description | Example |
|---|---|---|
| deviceHealthKey | Unique identifier of the device and its associated health in the data warehouse - surrogate key. | 123 |
| deviceHealth | Unique identifier of the device and its associated health - similar to DeviceHealthKey, but the identifier is a natural key. | b66bc706-ffff-7777-0340-032819502773 |
| deviceHealthName | Represents the status of the device. Not available - no information on this device. Healthy - device is not jailbroken. Unhealthy - device is jailbroken. |
Not Available Healthy Unhealthy |
| rowLastModifiedDateTimeUtc | Date and time in UTC when this specific MAM Device Health was last modified in the data warehouse. | 11/23/2016 12:00:00 AM |
MamPlatforms
The MamPlatform entity lists platform names and types on which a Mobile Application Management (MAM) app was installed.
| Property | Description | Example |
|---|---|---|
| platformKey | Unique identifier of the platform in the data warehouse - surrogate key. | 123 |
| platform | Unique identifier of the platform - similar to PlatformKey, but is a natural key. | 123 |
| platformName | Platform name | Not Available None Windows IOS Android. |
| rowLastModifiedDateTimeUtc | Date and time in UTC when this platform was last modified in the data warehouse. | 11/23/2016 12:00:00 AM |
managementAgentTypes
The managementAgentType entity represents the agents used to manage a device.
| Property | Description |
|---|---|
| managementAgentTypeID | Unique identifier of the management agent type. |
| managementAgentTypeKey | Unique identifier of the management agent type in the data warehouse - surrogate key. |
| managementAgentTypeName | Indicates what kind of agent is used to manage the device. |
Example
| ManagementAgentTypeID | Name | Description |
|---|---|---|
| 1 | EAS | The device is managed through Exchange Active Sync |
| 2 | MDM | The device is managed using an MDM agent |
| 3 | EasMdm | The device is managed by both Exchange Active Sync and an MDM agent |
| 4 | IntuneClient | The device is managed by the Intune PC agent |
| 5 | EasIntuneClient | The device is managed by both Exchange Active Sync and the Intune PC agent |
| 8 | ConfigManagerClient | The device is managed by the Configuration Manager agent |
| 10 | ConfigurationManagerClientMdm | The device is managed by Configuration Manager and MDM. |
| 11 | ConfigurationManagerCLientMdmEas | The device is managed by Configuration Manager, MDM and Exchange Active Sync. |
| 16 | Unknown | Unknown management agent type |
| 64 | GoogleCloudDevicePolicyController | The device is managed by Google's CloudDPC. |
managementStates
The ManagementState entity provides details on the state of the device. Detail can be useful in the cases where remote actions are applied, the device is jailbroken, or rooted.
| Property | Description |
|---|---|
| managementStateID | Unique identifier of the management state. |
| managementStateKey | Unique identifier of the management state in the data warehouse - surrogate key. |
| managementStateName | Indicates the state of the remote action applied to this device. |
Example
| managementStateID | Name | Description |
|---|---|---|
| 0 | Managed | Managed with no pending remote actions. |
| 1 | RetirePending | There is a retire command pending for the device. |
| 2 | RetireFailed | The retire command failed on the device. |
| 3 | WipePending | There is a wipe command pending for the device. |
| 4 | WipeFailed | The wipe command failed on the device. |
| 5 | Unhealthy | Unhealthy state. |
| 6 | DeletePending | There is a delete command pending for the device. |
| 7 | RetireIssued | A retire command has been issued to the device. |
| 8 | WipeIssued | A wipe command has been issued. |
| 9 | WipeCanceled | Wipe command has been canceled. |
| 10 | RetireCanceled | Retire command has been canceled. |
| 11 | Discovered | The device is newly discovered by Intune, once it checks in for the first time it moves to -Managed- state. |
mobileAppInstallStates
The MobileAppInstallState entity represents the install state for a mobile application after it has been assigned to a group containing devices, users or both.
| Property | Description |
|---|---|
| appInstallStateKey | The unique ID of the app install state for your account. |
| appInstallState | Enum value of the app install state. |
| appInstallStateName | Name of the app install state. |
mobileAppInstallStatusCounts
Represents a mobile app install status for a given target device type using Mobile Application Management through Microsoft Intune.
| Property | Description |
|---|---|
| dateKey | Key of the date when the app install status was recorded. |
| appKey | Key of the mobile app used to identify an instance of AppRevision. |
| deviceTypeKey | Key of the Device Type associated with the Mobile Application. |
| appInstallStateKey | Key of the app install state used to identify an instance of MobileAppInstallState. |
| errorCode | The error code returned by the app installer, the mobile platform or the service pertaining to the installation of the app. |
| count | Total count. |
ownerTypes
The ownerType entity indicates whether a device is corporate, personally owned, or unknown.
| Property | Description | Example |
|---|---|---|
| ownerTypeID | Unique identifier of the owner type. | |
| ownerTypeKey | Unique identifier of the owner type in the data warehouse - surrogate key. | |
| ownerTypeName | Represents the owner type of the devices: Corporate - Device is enterprise owned. Personal - Device is personally owned (BYOD). Unknown - No information on this device. | Corporate Personal Unknown |
Note
For the ownerTypeName filter in AzureAD when creating Dynamic Groups for devices, you need to set the value deviceOwnership as Company. For more information, see Rules for devices.
policies
The Policy entity lists device configuration profiles, app configuration profiles, and compliance policies. You can assign the policies with Mobile Device Management (MDM) to a group in your enterprise.
| Property | Description | Example |
|---|---|---|
| policyKey | Unique Key to represent the policy in the data warehouse. | 123 |
| policyId | Unique identifier of the Policy in the data warehouse. | b66bc706-ffff-7437-0340-032819502773 |
| policyName | Name of the Policy. | "Windows 10 Baseline" |
| policyVersion | Version of the Policy. When the policy is edited or changed, a newer version is created. | 1, 2, 3 |
| isDeleted | Indicates whether the Policy record has been updated. True - Policy has a new record with updated fields. False- The latest record for the policy. | True/False |
| startDateInclusiveUTC | Date and time in UTC when the policy was created in the data warehouse. | 11/23/2016 0:00 |
| deletedDateUTC | Date and time in UTC when IsDeleted changed to True. | 11/23/2016 0:00 |
| rowLastModifiedDateTimeUTC | Date and time in UTC when the policy was last modified in the data warehouse. | 11/23/2016 0:00 |
policyDeviceActivities
The following table lists the number of devices in the succeeded, pending, failed, or error state per day. The number reflects the data per Policy Type profiles. For example, if a device is in the succeeded state for all its assigned policies, it increments the succeeded counter up one for that day. If a device has two profiles assigned to it, one in the succeeded state and another in an error state, the entity increments the Succeeded counter and place the device in the error state. The policyDeviceActivity entity lists how many devices are in which state on a given day over the last 30 days.
| Property | Description | Example |
|---|---|---|
| dateKey | Date Key when the Device Configuration Profile check-in was recorded in the data warehouse. | 20160703 |
| pending | Number of unique Devices in pending state. | 123 |
| succeeded | Number of unique Devices in success state. | 12 |
| policyKey | Policy Key, can be joined with Policy to get the policyName. | Windows 10 baseline |
| error | Number of unique Devices in error state. | 10 |
| failed | Number of unique Devices in failed state. | 2 |
policyPlatformTypes
| Property | Description | Example |
|---|---|---|
| policyPlatformTypeKey | The unique key for the policy platform type. | 20170519 |
| policyPlatformTypeId | The unique identifier for the policy platform type. | 1 |
| policyPlatformTypeName | The name for the policy platform type. | AndroidForWork |
policyTypeActivities
The PolicyTypeActivity entity lists the cumulative number of devices in the succeeded, pending, failed, or error state. It lists these states with respect to a device configuration profile, app configuration profile, or compliance policy per day.
| Property | Description | Example |
|---|---|---|
| dateKey | Date Key when the device Configuration profile check-in was recorded in the data warehouse. | 20160703 |
| policyKey | Policy Key, can be joined with Policy to get the policyName. | Windows 10 baseline |
| policyTypeKey | Type of Policy Key, can be joined with Policy Type to get the policy type name. | Windows10 Compliance Policy |
| pending | Number of unique devices in pending state. | 123 |
| succeeded | Number of unique devices in success state. | 12 |
| error | Number of unique devices in error state. | 10 |
| failed | Number of unique devices in failed state. | 2 |
policyTypes
The PolicyType entity lists types of device configuration profiles, app configuration profiles, and Compliance policies. You can assign the policies with Mobile Device Management (MDM) to a group in your enterprise.
| Property | Description | Example |
|---|---|---|
| policyTypeId | Unique identifier of the policy in the source system. | 123 |
| policyTypeKey | Unique identifier of the policy in the data warehouse. | 1 |
| policyTypeName | Name of the policy type. | Windows 10 Compliance policy. |
policyUserActivities
The following table lists the number of users in the succeeded, pending, failed, or error state per day. The number reflects the data per Policy Type profiles. For example, if a user is in the succeeded state for all their assigned policies, it moves up the succeeded counter by one for that day. If a user has two profiles assigned to them, one in the succeeded state and the other is in an error state, the user in the error state is counted. The PolicyUserActivity entity lists how many users are in which state on a given day over the last 30 days.
| Property | Description | Example |
|---|---|---|
| dateKey | Date Key when the Device Configuration Profile check-in was recorded in the data warehouse. | 20160703 |
| pending | Number of unique Devices in pending state. | 123 |
| succeeded | Number of unique Devices in success state. | 12 |
| policyKey | Policy Key, can be joined with Policy to get the policyName. | Windows 10 baseline |
| error | Number of unique Devices in error state. | 10 |
termsAndConditions
A termsAndConditions entity represents the metadata and contents of a given Terms and Conditions (T&C) policy. The contents of T&C policies are presented to users upon their first attempt to enroll into Intune and subsequently upon edits where an administrator has required re-acceptance. They enable administrators to communicate the provisions to which a user must agree in order to have devices enrolled into Intune.
| Property | Description | Example |
|---|---|---|
| termsAndConditionsKey | A key corresponding to an entry in the 'userTermsAndConditionsAcceptances' collection | 123 |
| termsAndCondidionsId | The ID for this termsAndConditions entry | 276edcb7-7440-4339-b6c5-8b6fc556fee6 |
| termsAndConditionsVersion | The version of this terms and conditions entry | 1 |
| name | The name of this termsAndConditions entry. | Intune terms of use |
| description | The description for these terms and conditions. | |
| title | The title for these terms and conditions. | Device management corporate policy |
| summaryOfTerms | The summary of terms given to the user. | I agree to the terms and conditions. |
| termsAndConditionsBodyText | The body of text for these terms and conditions. | Device encryption Enforcement of 6 digits PIN |
| isDeleted | True or false value for whether this value is deleted. | False |
| startDateInclusiveUTC | The start date of these terms and conditions. | 8/23/2018 4:01:34 AM |
| endDateEclusiveUTC | The end date of these terms and conditions. | 12/31/9999 12:00:00 AM |
userDeviceAssociations
The UserDeviceAssociation entity contains user device associations in your organization.
| Name | Description | Example |
|---|---|---|
| userKey | Unique identifier of the user in the data warehouse. (Surrogate key). | 123 |
| deviceKey | Unique identifier of the device in the data warehouse. | 123 |
| createdDateTimeUTC | Date and time when the user device association was created. Uses UTC format. | 11/23/2016 0:00 |
| isDeleted | Indicates that the user unenrolled that device, and that the association is not current anymore. | True/False |
| endedDateTimeUTC | Date and time in UTC when IsDeleted changed to True. | 6/23/2017 0:00 |
users
The user entity lists all the Microsoft Entra users with assigned licenses in your enterprise.
The user entity collection contains user data. These records include user states during the data collection period, even if the user has been removed. For example, a user may be added to Intune and then removed during the course of the last month. While this user is not present at the time of the report, the user and state are present in the data from the prior month. You could create a report that would show the duration of the user's historic presence in your data.
| Property | Description | Example |
|---|---|---|
| userKey | Unique identifier of the user in the data warehouse - surrogate key. | 123 |
| userId | Unique identifier of the user - similar to UserKey, but is a natural key. | b66bc706-ffff-7437-0340-032819502773 |
| userEmail | Email address of the user. | John@constoso.com |
| userPrincipalName | User principal name of the user. | John@constoso.com |
| displayName | Display name of the user. | John |
| intuneLicensed | Specifies if this user is Intune licensed or not. | True/False |
| isDeleted | Indicates whether all of the user's licenses have expired and whether the user was therefore removed from Intune. For a single record, this flag does not change. Instead, a new record is created for a new user state. | True/False |
| rowLastModifiedDateTimeUTC | Date and time in UTC when the record was last modified in the data warehouse | 11/23/2016 0:00 |
userTermsAndConditionsAcceptances
A userTermsAndConditionsAcceptance entity represents the acceptance status of a given Terms and Conditions (T&C) policy by a given user. Users must accept the most up-to-date version of the terms in order to retain access to the Company Portal.
| Property | Description | Example |
|---|---|---|
| dateKey | A key corresponding to a date values in the 'dates' collection. | 20180823 |
| userKey | A user key mapping to a user in the 'users' collection. | 20000 |
| termsAndConditionsKey | A key corresponding to an entry in the 'termsAndConditions' collection | 1 |
| acceptedDateTimeUTC | The time that the user accepted these terms and conditions | 8/23/2018 4:01:34 AM |
| lastModifiedDateTimeUTC | The last time that this entry was modified. | 8/23/2018 4:01:34 AM |
vppProgramTypes
The vppProgramType entity lists possible VPP program types for an app.
| Property | Description |
|---|---|
| vppProgramTypeID | ID for the type. |
| vppProgramTypeKey | Surrogate key for the key. |
| vppProgramTypeName | VPP Program type. |
Example
| VppProgramID | Name | Description |
|---|---|---|
| 3DDA2474-470B-4503-9830-2665C21C1945 | Microsoft | Microsoft's VPP program. |
| 00000000-0000-0000-0000-000000000000 | Not Yet Available | Default value, No VPP. |
| B54814E0-68EA-4BA4-8088-B5AAB58E737B | Apple | Apple's VPP program. |
Next steps
For more about the Intune Data Warehouse, see Data Warehouse data model.