Created by Claude - please verify

Leaver devices - leave dates come from the cached users (employeeLeaveDateTime), which only covers the first page of users.

Required Microsoft Graph permissions

DeviceManagementManagedDevices.Read.All User.Read.All — application permissions, granted to the app registration with admin consent.

Licence: Microsoft Intune.

Endpoints: GET /v1.0/deviceManagement/managedDevices · GET /v1.0/users

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Devices Still Assigned to Leavers

Company hardware whose primary user has been disabled, deleted or is past their leave date. These are the devices to collect, wipe and re-issue - and until then they may still hold company data and a valid Intune enrollment.

No managed device belongs to a disabled, deleted or departed user.