Created by Claude - please verify

Intune posture - the summary counts come from Microsoft's own aggregates and can lag the device list below.

Required Microsoft Graph permissions

DeviceManagementManagedDevices.Read.All — application permission, granted to the app registration with admin consent.

Licence: An active Microsoft Intune licence on the tenant - the Graph API for Intune returns an error without one.

Endpoints: GET /v1.0/deviceManagement/managedDeviceOverview · GET /v1.0/deviceManagement/deviceCompliancePolicyDeviceStateSummary

The two summary endpoints are Microsoft's own aggregates and can lag the device list shown beneath them.

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Intune Compliance Posture

Tenant-level device posture from Microsoft Graph managedDeviceOverview and deviceCompliancePolicyDeviceStateSummary, with the devices that need attention listed underneath. The two summary endpoints are Microsoft's own aggregates, so they can differ slightly from a live count of the device list.

Intune posture could not be loaded

This report needs DeviceManagementManagedDevices.Read.All with admin consent and an active Intune licence on the tenant.