Created by Claude - please verify

Compromised devices - jailbreak detection and Mobile Threat Defense verdicts as reported to Intune.

Required Microsoft Graph permissions

DeviceManagementManagedDevices.Read.All — application permission, granted to the app registration with admin consent.

Licence: Microsoft Intune; a Mobile Threat Defense connector for threat states.

Endpoint: GET /v1.0/deviceManagement/managedDevices (jailBroken, partnerReportedThreatState, complianceState)

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Jailbroken, Rooted & Threat-flagged Devices

A jailbroken or rooted phone can read the data of every app on it, including Outlook and Teams. A Mobile Threat Defense partner (Defender for Endpoint on mobile, Lookout, ...) flagging a device means it is compromised or misconfigured right now. Each row should be blocked by compliance or wiped.

No managed device is jailbroken, rooted or flagged by Mobile Threat Defense.