Created by Claude - please verify

Intune licence compliance - devices enrolled without a device licence (Intune Device SKU) are not detected; check those separately.

Required Microsoft Graph permissions

User.Read.All DeviceManagementManagedDevices.Read.All Organization.Read.All — application permissions, granted to the app registration with admin consent.

Licence: Microsoft Intune.

Endpoints: GET /v1.0/users (assignedLicenses) · GET /v1.0/deviceManagement/managedDevices · GET /v1.0/subscribedSkus

Any INTUNE_* service plan counts except INTUNE_O365 (Basic Mobility and Security). Disabled plans on a user's licence are respected.

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Intune Licence Compliance

Users with devices enrolled in Intune who hold no Intune service plan. Intune keeps managing those devices, but the tenant is out of licence compliance - and the gap usually means a licence was removed from a leaver or a group-based assignment failed.

Every user with an enrolled device holds an Intune licence.