Created by Claude - please verify

Profile deployment - covers classic device configuration profiles; Settings Catalog and Endpoint Security policies report status elsewhere.

Required Microsoft Graph permissions

DeviceManagementConfiguration.Read.All — application permission, granted to the app registration with admin consent.

Licence: Microsoft Intune.

Endpoints: GET /v1.0/deviceManagement/deviceConfigurations · GET /v1.0/deviceManagement/deviceConfigurations/{id}/deviceStatusOverview

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Configuration Profile Deployment Errors

A configuration profile that errors or conflicts on a device is not enforced there - Wi-Fi, VPN, BitLocker or security baselines silently missing. Profiles with the highest share of failing devices are listed first.

No device configuration profiles exist.