Created by Claude - please verify

Compliance policies - requirements and the 'mark non-compliant' grace period per policy.

Required Microsoft Graph permissions

DeviceManagementConfiguration.Read.All — application permission, granted to the app registration with admin consent.

Licence: Microsoft Intune.

Endpoint: GET /v1.0/deviceManagement/deviceCompliancePolicies?$expand=scheduledActionsForRule($expand=scheduledActionConfigurations),assignments

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Compliance Policy Strength

Conditional Access trusts 'compliant' devices - so compliance is only as strong as the policies behind it. A long grace period, no password or encryption requirement, no minimum OS or allowed jailbroken devices make 'compliant' mean little. Compliance Setting Failures shows which devices fail; this report shows how high the bar is.