Created by Claude - please verify

Mobile device partnerships - on-demand scan (one statistics call per mailbox with devices).

Required Microsoft Graph permissions

Exchange.ManageAsApp (+ View-Only Recipients) — application permission, granted to the app registration with admin consent.

Licence: None.

Endpoints: Get-ActiveSyncOrganizationSettings · Get-MobileDevice · Get-EXOMobileDeviceStatistics

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Exchange ActiveSync Device Partnerships

Phones that sync mail over ActiveSync with the built-in mail app keep a full copy of the mailbox on a device Intune may never have seen. LegacyProtocols shows whether ActiveSync is allowed; this report shows the actual partnerships - unmanaged native mail apps, partnerships silent for 90 days, devices waiting in quarantine and users with many devices.

Press Run scan to read every mobile device partnership.