Created by Claude - please verify

Compliance by setting - Intune's per-setting summaries; a device failing several settings counts once per setting.

Required Microsoft Graph permissions

DeviceManagementConfiguration.Read.All — application permission, granted to the app registration with admin consent.

Licence: Microsoft Intune.

Endpoints: GET /v1.0/deviceManagement/deviceCompliancePolicies · GET /v1.0/deviceManagement/deviceCompliancePolicies/{id}/deviceSettingStateSummaries

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Compliance Failures by Setting

Non-compliant devices are blocked by Conditional Access, but the device list does not say why. This breaks compliance down by setting - OS version, BitLocker, password, Defender, jailbreak - so you fix the one cause behind hundreds of tickets.

No compliance policies exist.