Created by Claude - please verify

App hygiene - apps with assignments (beta) and Win32 supersedence relationships.

Required Microsoft Graph permissions

DeviceManagementApps.Read.All — application permission, granted to the app registration with admin consent.

Licence: Microsoft Intune.

Endpoints: GET /beta/deviceAppManagement/mobileApps?$expand=assignments · GET /beta/deviceAppManagement/mobileApps/{id}/relationships ($batch)

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Unassigned & Superseded Intune Apps

Apps assigned to nobody, older versions still assigned next to the app that supersedes them, and apps from Microsoft Store for Business (retired) pile up in every tenant. Install failures are a separate question; this report is about clean-up.