Created by Claude - please verify

EPM - elevation events of the last 30 days grouped per file (beta).

Required Microsoft Graph permissions

DeviceManagementConfiguration.Read.All (+ Intune RBAC 'EPM - View Reports') — application permission, granted to the app registration with admin consent.

Licence: Intune Suite or the Endpoint Privilege Management add-on.

Endpoint: GET /beta/deviceManagement/privilegeManagementElevations

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Endpoint Privilege Management Elevations (30 days)

Endpoint Privilege Management lets standard users run approved apps elevated. The elevation log shows what people actually need admin rights for: frequently confirmed elevations are candidates for automatic rules (fewer prompts and tickets), and unmanaged elevations show where rules are missing. It also shows whether the add-on is used at all.