DeviceManagementApps.Read.All
Export JSON
Export CSV
Copy URL
Print
ApplicationDelegated
Full Control
All Resources
Allows the app to read the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune, without a signed-in user.
Permission data: April 6, 2026 at 4:06 AM UTC
Delegated Access
App-Only Access
Permission Details
Application Permission
Read Microsoft Intune apps
Allows the app to read the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune, without a signed-in user.
Permission ID:
7a6ee1e7-141e-4cec-ae74-d9db155731ff
Delegated Permission
Admin consent required
Read Microsoft Intune apps
Allows the app to read the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune.
User sees: Allows the app to read the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune.
Permission ID:
4edf5f54-4666-44af-9de9-0144fb4b6e8c
Properties
Microsoft Graph v1.0
endpoint-derived-docs
Properties is shown from stable Microsoft Graph v1.0 metadata.
| Property | Type | Description |
|---|---|---|
createdDateTime |
DateTimeOffset |
The start time of the operation. |
lastActionDateTime |
DateTimeOffset |
The time of the last action of the operation. |
status |
operationStatus |
The current status of the operation: notStarted, running, completed, failed |
androidManagedAppProtections |
androidManagedAppProtection collection |
Android managed app policies. |
defaultManagedAppProtections |
defaultManagedAppProtection collection |
Default managed app policies. |
id |
string |
The unique identifier for an entity. Read-only. |
iosManagedAppProtections |
iosManagedAppProtection collection |
iOS managed app policies. |
isEnabledForMicrosoftStoreForBusiness |
boolean |
Whether the account is enabled for syncing applications from the Microsoft Store for Business. |
managedAppPolicies |
managedAppPolicy collection |
Managed app policies. |
managedAppRegistrations |
managedAppRegistration collection |
The managed app registrations. |
managedAppStatuses |
managedAppStatus collection |
The managed app statuses. |
managedEBooks |
managedEBook collection |
The Managed eBook. |
mdmWindowsInformationProtectionPolicies |
mdmWindowsInformationProtectionPolicy collection |
Windows information protection for apps running on devices which are MDM enrolled. |
microsoftStoreForBusinessLanguage |
stringNullable |
The locale information used to sync applications from the Microsoft Store for Business. Cultures that are specific to a country/region. The names of these cultures follow RFC 4646 (Windows Vista and later). The format is -<country/regioncode2>, where is a lowercase two-letter code derived from ISO 639-1 and <country/regioncode2> is an uppercase two-letter code derived from ISO 3166. For example, en-US for English (United States) is a specific culture. |
microsoftStoreForBusinessLastCompletedApplicationSyncTime |
date-time |
The last time an application sync from the Microsoft Store for Business was completed. |
Showing 15 of 23 properties.
JSON Representation
Microsoft Graph v1.0
endpoint-derived-docs
JSON representation is shown from stable Microsoft Graph v1.0 metadata.
JSON representation
{
"createdDateTime": "String (timestamp)",
"lastActionDateTime": "String (timestamp)",
"status": "notStarted | running | completed | failed"
}Relationships
Microsoft Graph v1.0
schema-derived
Relationships is shown from stable Microsoft Graph v1.0 metadata.
| Relationship | Type | Description |
|---|---|---|
androidManagedAppProtections |
androidManagedAppProtection collection |
Android managed app policies. |
defaultManagedAppProtections |
defaultManagedAppProtection collection |
Default managed app policies. |
iosManagedAppProtections |
iosManagedAppProtection collection |
iOS managed app policies. |
managedAppPolicies |
managedAppPolicy collection |
Managed app policies. |
managedAppRegistrations |
managedAppRegistration collection |
The managed app registrations. |
managedAppStatuses |
managedAppStatus collection |
The managed app statuses. |
managedEBooks |
managedEBook collection |
The Managed eBook. |
mdmWindowsInformationProtectionPolicies |
mdmWindowsInformationProtectionPolicy collection |
Windows information protection for apps running on devices which are MDM enrolled. |
mobileAppCategories |
mobileAppCategory collection |
The mobile app categories. |
mobileAppConfigurations |
managedDeviceMobileAppConfiguration collection |
The Managed Device Mobile Application Configurations. |
mobileAppRelationships |
mobileAppRelationship collection |
The mobile app relationship represents the dependency or supersedence relationship between two Intune mobile LOB applications. |
mobileApps |
mobileApp collection |
The mobile apps. |
targetedManagedAppConfigurations |
targetedManagedAppConfiguration collection |
Targeted managed app configurations. |
vppTokens |
vppToken collection |
List of Vpp tokens for this organization. |
windowsInformationProtectionPolicies |
windowsInformationProtectionPolicy collection |
Windows information protection for apps running on devices which are not MDM enrolled. |
deviceAppManagementTasks |
deviceAppManagementTask collection |
Device app management tasks. |
enterpriseCodeSigningCertificates |
enterpriseCodeSigningCertificate collection |
The Windows Enterprise Code Signing Certificate. |
iosLobAppProvisioningConfigurations |
iosLobAppProvisioningConfiguration collection |
The IOS Lob App Provisioning Configurations. |
managedEBookCategories |
managedEBookCategory collection |
The mobile eBook categories. |
microsoftStoreForBusinessPortalSelection |
microsoftStoreForBusinessPortalSelectionOptions |
Related microsoftStoreForBusinessPortalSelection data exposed by this resource. |
Graph Methods
Delegated access
App-only access
Exact Microsoft Learn match
Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.
Exact Microsoft Learn match
Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.
No Microsoft Learn PowerShell mapping available
Microsoft Graph PowerShell v1.0 commands are not available from refreshed Microsoft Learn PowerShell snippets for this permission.
No deterministic PowerShell command map is available for this permission.
Browse PowerShell docs
No Microsoft Learn PowerShell mapping available
Microsoft Graph PowerShell beta commands are not available from refreshed Microsoft Learn PowerShell snippets for this permission.
No deterministic PowerShell command map is available for this permission.
Browse PowerShell docsCode Examples
C# / .NET SDK
using Azure.Identity;
using Microsoft.Graph;
var scopes = new[] { "DeviceManagementApps.Read.All" };
var credential = new InteractiveBrowserCredential(
new InteractiveBrowserCredentialOptions
{
ClientId = "YOUR_CLIENT_ID",
TenantId = "YOUR_TENANT_ID",
RedirectUri = new Uri("http://localhost")
});
var graphClient = new GraphServiceClient(credential, scopes);
var response = await graphClient
.WithUrl("https://graph.microsoft.com/v1.0/deviceAppManagement")
.GetAsync();
JavaScript
import { Client } from "@microsoft/microsoft-graph-client";
import { InteractiveBrowserCredential } from "@azure/identity";
const credential = new InteractiveBrowserCredential({
clientId: "YOUR_CLIENT_ID",
tenantId: "YOUR_TENANT_ID",
redirectUri: "http://localhost"
});
const token = await credential.getToken(["DeviceManagementApps.Read.All"]);
const client = Client.init({
authProvider: (done) => done(null, token.token)
});
const response = await client.api("/deviceAppManagement").get();
PowerShell
Connect-MgGraph -Scopes "DeviceManagementApps.Read.All"
Invoke-MgGraphRequest -Method GET -Uri "https://graph.microsoft.com/v1.0/deviceAppManagement"
Python
from azure.identity import InteractiveBrowserCredential
import requests
credential = InteractiveBrowserCredential(
client_id="YOUR_CLIENT_ID",
tenant_id="YOUR_TENANT_ID"
)
token = credential.get_token("DeviceManagementApps.Read.All")
response = requests.get(
"https://graph.microsoft.com/v1.0/deviceAppManagement",
headers={"Authorization": f"Bearer {token.token}"}
)
print(response.json())App Registration
1
Navigate to Azure Portal
Go to App registrations in Microsoft Entra admin center
2
Add API Permission
Select your app → API permissions → Add a permission → Microsoft Graph
3
Select Permission Type
Choose Application permissions or delegated permissions and search for DeviceManagementApps.Read.All
4
Grant Admin Consent
Application permissions always require admin consent.