Created by Claude - please verify

Unsupervised Apple devices - ownership comes from Intune's ownership flag; fix wrong flags in Intune first.

Required Microsoft Graph permissions

DeviceManagementManagedDevices.Read.All — application permission, granted to the app registration with admin consent.

Licence: Microsoft Intune; Apple Business Manager for ADE.

Endpoint: GET /v1.0/deviceManagement/managedDevices (isSupervised, deviceEnrollmentType, managedDeviceOwnerType)

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Unsupervised iOS / iPadOS Devices

Supervision is what lets Intune enforce single-app mode, block iCloud backup, silently install apps and prevent the user from removing management. A corporate iPhone that is not supervised is effectively a personal phone with a profile - and it can only be supervised by wiping it and enrolling through Automated Device Enrollment (Apple Business Manager).

No iOS or iPadOS devices are managed by Intune.