Created by Claude - please verify

Device settings - Entra join/registration scope, MFA, device quota, local administrators and LAPS.

Required Microsoft Graph permissions

Policy.Read.DeviceConfiguration — application permission, granted to the app registration with admin consent.

Licence: None.

Endpoint: GET /v1.0/policies/deviceRegistrationPolicy

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Device Registration & Join Settings

Who may join devices, whether that needs MFA, and who becomes local administrator on every joined device are tenant-wide settings nobody looks at after day one. The defaults let every user join devices and make them local admins.