Policy Deployment Status

The question it answers: Which configuration profiles and compliance policies are assigned, and on how many devices did they succeed, fail or conflict?

Every configuration profile, compliance policy, settings-catalog policy and administrative template with its assignment and, where Graph reports it, how many devices applied it, failed, conflict or are still pending. A policy that errors or conflicts on a device is not enforced there. Only failing classic profiles: Configuration Profile Deployment Errors.

Note

Device counts come from deviceStatusOverview, which Graph documents only for configuration profiles and compliance policies. Settings-catalog policies and administrative templates show their assignment; their device status is in the Intune portal.

At a glance

Where in the app	Intune › Reports › Policy Deployment Status
Workload	Intune
Kind	Findings list · dashboard tile
Data	Read from Microsoft 365 when someone first opens it, then kept for the report cache lifetime (Settings > Data & cache, 1 hour unless changed).
Licence	Microsoft Intune.
Report id (API and MCP)	intune.policies.deployment-status

Columns

Column	Key	Type
Severity	Severity	Status
Type	Category	Text
Policy	Subject	Link
Platform	Setting	Text
Devices	Value	Text
Status	Finding	Text
Assignment	Detail	Text
Last modified	When	Date
Failing devices	Number	Number

A findings list hides columns that no row fills. Severity is Critical, Serious, Warning, OK or Info; rows rated Critical, Serious or Warning need attention (Working with findings).

What it needs

Licence: Microsoft Intune.

Application permissions on the IntensiveReports app registration (all permissions):

Permission	API	What it allows	Note
DeviceManagementConfiguration.Read.All	Microsoft Graph	Read Microsoft Intune device configuration and policies

Data sources it reads

• GET /v1.0/deviceManagement/deviceConfigurations?$expand=assignments
• GET /v1.0/deviceManagement/deviceConfigurations/{id}/deviceStatusOverview (via $batch)
• GET /v1.0/deviceManagement/deviceCompliancePolicies?$expand=assignments
• GET /v1.0/deviceManagement/deviceCompliancePolicies/{id}/deviceStatusOverview (via $batch)
• GET /beta/deviceManagement/configurationPolicies?$expand=assignments
• GET /beta/deviceManagement/groupPolicyConfigurations?$expand=assignments

Through the API and MCP

GET /ir-api/v1/reports/intune.policies.deployment-status?size=100

An AI assistant reads it with the MCP tool get_report and the id intune.policies.deployment-status. The client needs the Read grant for Intune. See Using the API.