Intune Compliance Posture
The question it answers: How compliant are the tenant’s Intune-managed devices, and which devices are not compliant?
Tenant-level device posture from Microsoft Graph managedDeviceOverview and deviceCompliancePolicyDeviceStateSummary, with the devices that need attention listed underneath. The two summary endpoints are Microsoft’s own aggregates, so they can differ slightly from a live count of the device list. Devices needing attention: managed devices whose compliance state is not “compliant”, from the cached Intune device list.
At a glance
Section titled “At a glance”| Where in the app | Intune › Compliance Posture |
| Workload | Intune |
| Kind | Table |
| Data | Built from the tenant data IntensiveReports keeps in memory and refreshes in the background, so it opens at once. |
| Licence | An active Microsoft Intune licence on the tenant - the Graph API for Intune returns an error without one. |
| Report id (API and MCP) | intune.devices.compliance-posture |
| An empty result means | Every managed device reports as compliant. |
Columns
Section titled “Columns”| Column | Key | Type |
|---|---|---|
| Device | DeviceName | Link |
| User | UserPrincipalName | Text |
| OS | OperatingSystem | Text |
| OS version | OsVersion | Text |
| Compliance | ComplianceState | Status |
| Last sync | LastSyncDateTime | Date |
| Model | Model | Text |
| Serial | SerialNumber | Text |
What it needs
Section titled “What it needs”Licence: An active Microsoft Intune licence on the tenant - the Graph API for Intune returns an error without one.
Application permissions on the IntensiveReports app registration (all permissions):
| Permission | API | What it allows | Note |
|---|---|---|---|
DeviceManagementManagedDevices.Read.All | Microsoft Graph | Read Microsoft Intune devices |
Data sources it reads
GET /v1.0/deviceManagement/managedDeviceOverviewGET /v1.0/deviceManagement/deviceCompliancePolicyDeviceStateSummaryGET /beta/deviceManagement/managedDevices
Through the API and MCP
Section titled “Through the API and MCP”GET /ir-api/v1/reports/intune.devices.compliance-posture?size=100An AI assistant reads it with the MCP tool get_report and the id intune.devices.compliance-posture. The client needs the Read grant for Intune. See Using the API.