managedDevice resource type

Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.

Devices that are managed or pre-enrolled through Intune


Method Return Type Description
List managedDevices managedDevice collection List properties and relationships of the managedDevice objects.
Get managedDevice managedDevice Read properties and relationships of the managedDevice object.
Create managedDevice managedDevice Create a new managedDevice object.
Delete managedDevice None Deletes a managedDevice.
Update managedDevice managedDevice Update the properties of a managedDevice object.
retire action None Retire a device
wipe action None Wipe a device
resetPasscode action None Reset passcode
remoteLock action None Remote lock
requestRemoteAssistance action None Request remote assistance
disableLostMode action None Disable lost mode
locateDevice action None Locate a device
bypassActivationLock action None Bypass activation lock
rebootNow action None Reboot device
shutDown action None Shut down device
recoverPasscode action None Recover passcode
cleanWindowsDevice action None Clean Windows device
logoutSharedAppleDeviceActiveUser action None Logout shared Apple device active user
deleteUserFromSharedAppleDevice action None Delete user from shared Apple device
syncDevice action None Not yet documented
windowsDefenderScan action None Not yet documented
windowsDefenderUpdateSignatures action None Not yet documented
updateWindowsDeviceAccount action None Not yet documented


Property Type Description
id String Unique Identifier for the device
userId String Unique Identifier for the user associated with the device
deviceName String Name of the device
managedDeviceOwnerType managedDeviceOwnerType Ownership of the device. Can be 'company' or 'personal'. Possible values are: unknown, company, personal.
deviceActionResults deviceActionResult collection List of ComplexType deviceActionResult objects.
enrolledDateTime DateTimeOffset Enrollment time of the device.
lastSyncDateTime DateTimeOffset The date and time that the device last completed a successful sync with Intune.
operatingSystem String Operating system of the device. Windows, iOS, etc.
complianceState complianceState Compliance state of the device. Possible values are: unknown, compliant, noncompliant, conflict, error, inGracePeriod, configManager.
jailBroken String whether the device is jail broken or rooted.
managementAgent managementAgentType Management channel of the device. Intune, EAS, etc. Possible values are: eas, mdm, easMdm, intuneClient, easIntuneClient, configurationManagerClient, configurationManagerClientMdm, configurationManagerClientMdmEas, unknown, jamf, googleCloudDevicePolicyController.
osVersion String Operating system version of the device.
easActivated Boolean Whether the device is Exchange ActiveSync activated.
easDeviceId String Exchange ActiveSync Id of the device.
easActivationDateTime DateTimeOffset Exchange ActivationSync activation time of the device.
azureADRegistered Boolean Whether the device is Azure Active Directory registered.
deviceEnrollmentType deviceEnrollmentType Enrollment type of the device. Possible values are: unknown, userEnrollment, deviceEnrollmentManager, appleBulkWithUser, appleBulkWithoutUser, windowsAzureADJoin, windowsBulkUserless, windowsAutoEnrollment, windowsBulkAzureDomainJoin, windowsCoManagement.
activationLockBypassCode String Code that allows the Activation Lock on a device to be bypassed.
emailAddress String Email(s) for the user associated with the device
azureADDeviceId String The unique identifier for the Azure Active Directory device. Read only.
deviceRegistrationState deviceRegistrationState Device registration state. Possible values are: notRegistered, registered, revoked, keyConflict, approvalPending, certificateReset, notRegisteredPendingEnrollment, unknown.
deviceCategoryDisplayName String Device category display name
isSupervised Boolean Device supervised status
exchangeLastSuccessfulSyncDateTime DateTimeOffset Last time the device contacted Exchange.
exchangeAccessState deviceManagementExchangeAccessState The Access State of the device in Exchange. Possible values are: none, unknown, allowed, blocked, quarantined.
exchangeAccessStateReason deviceManagementExchangeAccessStateReason The reason for the device's access state in Exchange. Possible values are: none, unknown, exchangeGlobalRule, exchangeIndividualRule, exchangeDeviceRule, exchangeUpgrade, exchangeMailboxPolicy, other, compliant, notCompliant, notEnrolled, unknownLocation, mfaRequired, azureADBlockDueToAccessPolicy, compromisedPassword, deviceNotKnownWithManagedApp.
remoteAssistanceSessionUrl String Url that allows a Remote Assistance session to be established with the device.
remoteAssistanceSessionErrorDetails String An error string that identifies issues when creating Remote Assistance session objects.
isEncrypted Boolean Device encryption status
userPrincipalName String Device user principal name
model String Model of the device
manufacturer String Manufacturer of the device
imei String IMEI
complianceGracePeriodExpirationDateTime DateTimeOffset The DateTime when device compliance grace period expires
serialNumber String SerialNumber
phoneNumber String Phone number of the device
androidSecurityPatchLevel String Android security patch level
userDisplayName String User display name
configurationManagerClientEnabledFeatures configurationManagerClientEnabledFeatures ConfigrMgr client enabled features
wiFiMacAddress String Wi-Fi MAC
deviceHealthAttestationState deviceHealthAttestationState The device health attestation state.
subscriberCarrier String Subscriber Carrier
meid String MEID
totalStorageSpaceInBytes Int64 Total Storage in Bytes
freeStorageSpaceInBytes Int64 Free Storage in Bytes
managedDeviceName String Automatically generated name to identify a device. Can be overwritten to a user friendly name.
partnerReportedThreatState managedDevicePartnerReportedHealthState Indicates the threat state of a device when a Mobile Threat Defense partner is in use by the account and device. Read Only. Possible values are: unknown, activated, deactivated, secured, lowSeverity, mediumSeverity, highSeverity, unresponsive, compromised, misconfigured.


Relationship Type Description
deviceCategory deviceCategory Device category

JSON Representation

Here is a JSON representation of the resource.

  "@odata.type": "#microsoft.graph.managedDevice",
  "id": "String (identifier)",
  "userId": "String",
  "deviceName": "String",
  "managedDeviceOwnerType": "String",
  "deviceActionResults": [
      "@odata.type": "microsoft.graph.deviceActionResult",
      "actionName": "String",
      "actionState": "String",
      "startDateTime": "String (timestamp)",
      "lastUpdatedDateTime": "String (timestamp)"
  "enrolledDateTime": "String (timestamp)",
  "lastSyncDateTime": "String (timestamp)",
  "operatingSystem": "String",
  "complianceState": "String",
  "jailBroken": "String",
  "managementAgent": "String",
  "osVersion": "String",
  "easActivated": true,
  "easDeviceId": "String",
  "easActivationDateTime": "String (timestamp)",
  "azureADRegistered": true,
  "deviceEnrollmentType": "String",
  "activationLockBypassCode": "String",
  "emailAddress": "String",
  "azureADDeviceId": "String",
  "deviceRegistrationState": "String",
  "deviceCategoryDisplayName": "String",
  "isSupervised": true,
  "exchangeLastSuccessfulSyncDateTime": "String (timestamp)",
  "exchangeAccessState": "String",
  "exchangeAccessStateReason": "String",
  "remoteAssistanceSessionUrl": "String",
  "remoteAssistanceSessionErrorDetails": "String",
  "isEncrypted": true,
  "userPrincipalName": "String",
  "model": "String",
  "manufacturer": "String",
  "imei": "String",
  "complianceGracePeriodExpirationDateTime": "String (timestamp)",
  "serialNumber": "String",
  "phoneNumber": "String",
  "androidSecurityPatchLevel": "String",
  "userDisplayName": "String",
  "configurationManagerClientEnabledFeatures": {
    "@odata.type": "microsoft.graph.configurationManagerClientEnabledFeatures",
    "inventory": true,
    "modernApps": true,
    "resourceAccess": true,
    "deviceConfiguration": true,
    "compliancePolicy": true,
    "windowsUpdateForBusiness": true
  "wiFiMacAddress": "String",
  "deviceHealthAttestationState": {
    "@odata.type": "microsoft.graph.deviceHealthAttestationState",
    "lastUpdateDateTime": "String",
    "contentNamespaceUrl": "String",
    "deviceHealthAttestationStatus": "String",
    "contentVersion": "String",
    "issuedDateTime": "String (timestamp)",
    "attestationIdentityKey": "String",
    "resetCount": 1024,
    "restartCount": 1024,
    "dataExcutionPolicy": "String",
    "bitLockerStatus": "String",
    "bootManagerVersion": "String",
    "codeIntegrityCheckVersion": "String",
    "secureBoot": "String",
    "bootDebugging": "String",
    "operatingSystemKernelDebugging": "String",
    "codeIntegrity": "String",
    "testSigning": "String",
    "safeMode": "String",
    "windowsPE": "String",
    "earlyLaunchAntiMalwareDriverProtection": "String",
    "virtualSecureMode": "String",
    "pcrHashAlgorithm": "String",
    "bootAppSecurityVersion": "String",
    "bootManagerSecurityVersion": "String",
    "tpmVersion": "String",
    "pcr0": "String",
    "secureBootConfigurationPolicyFingerPrint": "String",
    "codeIntegrityPolicy": "String",
    "bootRevisionListInfo": "String",
    "operatingSystemRevListInfo": "String",
    "healthStatusMismatchInfo": "String",
    "healthAttestationSupportedStatus": "String"
  "subscriberCarrier": "String",
  "meid": "String",
  "totalStorageSpaceInBytes": 1024,
  "freeStorageSpaceInBytes": 1024,
  "managedDeviceName": "String",
  "partnerReportedThreatState": "String"