Android Device Administrator Leftovers
The question it answers: Which Android devices are still managed with the deprecated device administrator mode?
Google deprecated Android device administrator in 2020 and Intune ended support for it on devices with Google Mobile Services on 31 December 2024. Those devices get no fixes and newer Android versions lose management capabilities. Microsoft Teams certified Android devices are the documented exception.
At a glance
Section titled “At a glance”| Where in the app | Intune › Service & Operations › Android Device Admin Leftovers |
| Workload | Intune |
| Kind | Table |
| Data | Built from the tenant data IntensiveReports keeps in memory and refreshes in the background, so it opens at once. |
| Licence | Microsoft Intune. |
| Report id (API and MCP) | intune.service.android-management-modes |
Columns
Section titled “Columns”| Column | Key | Type |
|---|---|---|
| Device | DeviceName | Link |
| User | UserPrincipalName | Text |
| Mode | Category | Status |
| Finding | Finding | Text |
| Android | OsVersion | Text |
| Model | Model | Text |
| Last sync | LastSyncDateTime | Date |
Filters
Section titled “Filters”| Filter | Key (API) | On when the page opens |
|---|---|---|
| Only device administrator devices | device-administrator | Yes |
What it needs
Section titled “What it needs”Licence: Microsoft Intune.
Application permissions on the IntensiveReports app registration (all permissions):
| Permission | API | What it allows | Note |
|---|---|---|---|
DeviceManagementManagedDevices.Read.All | Microsoft Graph | Read Microsoft Intune devices |
Data sources it reads
GET /beta/deviceManagement/managedDevices?$filter=operatingSystem eq 'Android'&$select=id,deviceTypeGET /beta/deviceManagement/managedDevices
Through the API and MCP
Section titled “Through the API and MCP”GET /ir-api/v1/reports/intune.service.android-management-modes?size=100GET /ir-api/v1/reports/intune.service.android-management-modes?filter=device-administratorAn AI assistant reads it with the MCP tool get_report and the id intune.service.android-management-modes. The client needs the Read grant for Intune. See Using the API.