DeviceManagementConfiguration.Read.All
— application permission, granted to the app registration with admin consent.
Licence: Microsoft Intune.
Endpoint:
GET /beta/deviceManagement/configurationPolicies?$expand=settings,assignments
If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.
Local Administrator Assignments via Intune
Account protection policies can add users and groups to the local Administrators group of every device they target. A broad principal or an admin group on All devices turns one compromised account into admin rights everywhere. Prefer Windows LAPS for break-fix and Endpoint Privilege Management for elevation.
Loading...