Created by Claude - please verify

Automated Device Enrollment - imported Apple device identities per enrolment program token (beta).

Required Microsoft Graph permissions

DeviceManagementServiceConfig.Read.All — application permission, granted to the app registration with admin consent.

Licence: Microsoft Intune + Apple Business Manager.

Endpoints: GET /beta/deviceManagement/depOnboardingSettings · GET /beta/deviceManagement/depOnboardingSettings/{id}/importedAppleDeviceIdentities

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Apple ADE Devices Never Enrolled

Every iPhone, iPad and Mac bought through Apple Business Manager appears in Intune before anyone unboxes it. Serial numbers that never enrol are hardware in a cupboard, lost, or handed to someone who skipped setup; devices without an enrolment profile would set up unmanaged.