Working with Intune in Microsoft Graph
Important: APIs under the /beta version in Microsoft Graph are in preview and are subject to change. Use of these APIs in production applications is not supported.
Note: Using the Microsoft Graph APIs to configure Intune controls and policies still requires that the Intune service is correctly licensed by the customer.
The Microsoft Graph API for Intune enables programmatic access to Intune information for your tenant; the API performs the same Intune operations as those available through the Azure Portal.
For mobile device management (MDM) scenarios, the Graph API for Intune supports standalone deployments; Intune hybrid deployments are not supported.
Using the Intune Graph API
Intune provides data into the Microsoft Graph in the same way as other cloud services do, with rich entity information and relationship navigation. Use Microsoft Graph to combine information from other services and Intune to build rich cross-service applications for IT professionals or end users.
Here is an example of how you can determine whether an application is installed on a user's device:
Get from Azure Active Directory a list of devices registered to a user:
Then view the list of applications for your tenant:
Take the ID from the application and determine the installation state for the application (and therefore user):
Using Graph permission scopes
Microsof Graph controls access to resources using permission scopes. As a developer, you must specify the permission scopes you need to access Intune resources. Typically, you specify the permission scopes you need in the Azure Active Directory portal. For more information, see Microsoft Graph permission scopes and Intune permission scopes.
To use the Table of Contents on the Microsoft Graph site
You can browse the Table of Contents (in the left pane of the site) to find the parts of the Intune Graph API and resource documentation you want to see.
- Click /Beta Reference to open the beta docs.
- Scroll down and click Intune.
- Continue to click subsections below Intune for the parts of the API you