Microsoft Graph · Schema

microsoft.graph.managedDevice

Microsoft GraphAzure ADCollaborationContactsDocumentsEmailGraphIdentityMicrosoftOffice 365PresentationsProductivitySpreadsheetsT1Task

Properties

Name Type Description
activationLockBypassCode string The code that allows the Activation Lock on managed device to be bypassed. Default, is Null (Non-Default property) for this property when returned as part of managedDevice entity in LIST call. To retr
androidSecurityPatchLevel string Android security patch level. This property is read-only.
azureADDeviceId string The unique identifier for the Azure Active Directory device. Read only. This property is read-only.
azureADRegistered boolean Whether the device is Azure Active Directory registered. This property is read-only.
complianceGracePeriodExpirationDateTime string The DateTime when device compliance grace period expires. This property is read-only.
complianceState object
configurationManagerClientEnabledFeatures object ConfigrMgr client enabled features. This property is read-only.
deviceActionResults array List of ComplexType deviceActionResult objects. This property is read-only.
deviceCategoryDisplayName string Device category display name. Default is an empty string. Supports $filter operator 'eq' and 'or'. This property is read-only.
deviceEnrollmentType object
deviceHealthAttestationState object The device health attestation state. This property is read-only.
deviceName string Name of the device. This property is read-only.
deviceRegistrationState object
easActivated boolean Whether the device is Exchange ActiveSync activated. This property is read-only.
easActivationDateTime string Exchange ActivationSync activation time of the device. This property is read-only.
easDeviceId string Exchange ActiveSync Id of the device. This property is read-only.
emailAddress string Email(s) for the user associated with the device. This property is read-only.
enrolledDateTime string Enrollment time of the device. Supports $filter operator 'lt' and 'gt'. This property is read-only.
enrollmentProfileName string Name of the enrollment profile assigned to the device. Default value is empty string, indicating no enrollment profile was assgined. This property is read-only.
ethernetMacAddress string Indicates Ethernet MAC Address of the device. Default, is Null (Non-Default property) for this property when returned as part of managedDevice entity. Individual get call with select query options is
exchangeAccessState object
exchangeAccessStateReason object
exchangeLastSuccessfulSyncDateTime string Last time the device contacted Exchange. This property is read-only.
freeStorageSpaceInBytes number Free Storage in Bytes. Default value is 0. Read-only. This property is read-only.
iccid string Integrated Circuit Card Identifier, it is A SIM card's unique identification number. Default is an empty string. To retrieve actual values GET call needs to be made, with device id and included in sel
imei string IMEI. This property is read-only.
isEncrypted boolean Device encryption status. This property is read-only.
isSupervised boolean Device supervised status. This property is read-only.
jailBroken string Whether the device is jail broken or rooted. Default is an empty string. Supports $filter operator 'eq' and 'or'. This property is read-only.
lastSyncDateTime string The date and time that the device last completed a successful sync with Intune. Supports $filter operator 'lt' and 'gt'. This property is read-only.
managedDeviceName string Automatically generated name to identify a device. Can be overwritten to a user friendly name.
managedDeviceOwnerType object
managementAgent object
managementCertificateExpirationDate string Reports device management certificate expiration date. This property is read-only.
managementState object
manufacturer string Manufacturer of the device. This property is read-only.
meid string MEID. This property is read-only.
model string Model of the device. This property is read-only.
notes string Notes on the device created by IT Admin. Default is null. To retrieve actual values GET call needs to be made, with device id and included in select parameter. Supports: $select. $Search is not suppor
operatingSystem string Operating system of the device. Windows, iOS, etc. This property is read-only.
osVersion string Operating system version of the device. This property is read-only.
partnerReportedThreatState object
phoneNumber string Phone number of the device. This property is read-only.
physicalMemoryInBytes number Total Memory in Bytes. Default is 0. To retrieve actual values GET call needs to be made, with device id and included in select parameter. Supports: $select. Read-only. This property is read-only.
remoteAssistanceSessionErrorDetails string An error string that identifies issues when creating Remote Assistance session objects. This property is read-only.
remoteAssistanceSessionUrl string Url that allows a Remote Assistance session to be established with the device. Default is an empty string. To retrieve actual values GET call needs to be made, with device id and included in select pa
requireUserEnrollmentApproval boolean Reports if the managed iOS device is user approval enrollment. This property is read-only.
serialNumber string SerialNumber. This property is read-only.
subscriberCarrier string Subscriber Carrier. This property is read-only.
totalStorageSpaceInBytes number Total Storage in Bytes. This property is read-only.
udid string Unique Device Identifier for iOS and macOS devices. Default is an empty string. To retrieve actual values GET call needs to be made, with device id and included in select parameter. Supports: $select.
userDisplayName string User display name. This property is read-only.
userId string Unique Identifier for the user associated with the device. This property is read-only.
userPrincipalName string Device user principal name. This property is read-only.
wiFiMacAddress string Wi-Fi MAC. This property is read-only.
deviceCategory object Device category
deviceCompliancePolicyStates array Device compliance policy states for this device.
deviceConfigurationStates array Device configuration states for this device.
logCollectionRequests array List of log collection requests
users array The primary users associated with the managed device.
windowsProtectionState object The device protection status. This property is read-only.
@odata.type string
View JSON Schema on GitHub

JSON Schema

microsoft-graph-microsoftgraphmanageddevice-schema.json Raw ↑
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/microsoft.graph.managedDevice",
  "title": "microsoft.graph.managedDevice",
  "allOf": [
    {
      "$ref": "#/components/schemas/microsoft.graph.entity"
    },
    {
      "title": "managedDevice",
      "required": [
        "@odata.type"
      ],
      "type": "object",
      "properties": {
        "activationLockBypassCode": {
          "type": "string",
          "description": "The code that allows the Activation Lock on managed device to be bypassed. Default, is Null (Non-Default property) for this property when returned as part of managedDevice entity in LIST call. To retrieve actual values GET call needs to be made, with device id and included in select parameter. Supports: $select. $Search is not supported. Read-only. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "androidSecurityPatchLevel": {
          "type": "string",
          "description": "Android security patch level. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "azureADDeviceId": {
          "type": "string",
          "description": "The unique identifier for the Azure Active Directory device. Read only. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "azureADRegistered": {
          "type": "boolean",
          "description": "Whether the device is Azure Active Directory registered. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "complianceGracePeriodExpirationDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "The DateTime when device compliance grace period expires. This property is read-only.",
          "format": "date-time",
          "readOnly": true
        },
        "complianceState": {
          "$ref": "#/components/schemas/microsoft.graph.complianceState"
        },
        "configurationManagerClientEnabledFeatures": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.configurationManagerClientEnabledFeatures"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "description": "ConfigrMgr client enabled features. This property is read-only.",
          "readOnly": true
        },
        "deviceActionResults": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.deviceActionResult"
          },
          "description": "List of ComplexType deviceActionResult objects. This property is read-only.",
          "readOnly": true
        },
        "deviceCategoryDisplayName": {
          "type": "string",
          "description": "Device category display name. Default is an empty string. Supports $filter operator 'eq' and 'or'. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "deviceEnrollmentType": {
          "$ref": "#/components/schemas/microsoft.graph.deviceEnrollmentType"
        },
        "deviceHealthAttestationState": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.deviceHealthAttestationState"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "description": "The device health attestation state. This property is read-only.",
          "readOnly": true
        },
        "deviceName": {
          "type": "string",
          "description": "Name of the device. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "deviceRegistrationState": {
          "$ref": "#/components/schemas/microsoft.graph.deviceRegistrationState"
        },
        "easActivated": {
          "type": "boolean",
          "description": "Whether the device is Exchange ActiveSync activated. This property is read-only.",
          "readOnly": true
        },
        "easActivationDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "Exchange ActivationSync activation time of the device. This property is read-only.",
          "format": "date-time",
          "readOnly": true
        },
        "easDeviceId": {
          "type": "string",
          "description": "Exchange ActiveSync Id of the device. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "emailAddress": {
          "type": "string",
          "description": "Email(s) for the user associated with the device. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "enrolledDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "Enrollment time of the device. Supports $filter operator 'lt' and 'gt'. This property is read-only.",
          "format": "date-time",
          "readOnly": true
        },
        "enrollmentProfileName": {
          "type": "string",
          "description": "Name of the enrollment profile assigned to the device. Default value is empty string, indicating no enrollment profile was assgined. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "ethernetMacAddress": {
          "type": "string",
          "description": "Indicates Ethernet MAC Address of the device. Default, is Null (Non-Default property) for this property when returned as part of managedDevice entity. Individual get call with select query options is needed to retrieve actual values. Example: deviceManagement/managedDevices({managedDeviceId})?$select=ethernetMacAddress Supports: $select. $Search is not supported. Read-only. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "exchangeAccessState": {
          "$ref": "#/components/schemas/microsoft.graph.deviceManagementExchangeAccessState"
        },
        "exchangeAccessStateReason": {
          "$ref": "#/components/schemas/microsoft.graph.deviceManagementExchangeAccessStateReason"
        },
        "exchangeLastSuccessfulSyncDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "Last time the device contacted Exchange. This property is read-only.",
          "format": "date-time",
          "readOnly": true
        },
        "freeStorageSpaceInBytes": {
          "type": "number",
          "description": "Free Storage in Bytes. Default value is 0. Read-only. This property is read-only.",
          "format": "int64",
          "readOnly": true
        },
        "iccid": {
          "type": "string",
          "description": "Integrated Circuit Card Identifier, it is A SIM card's unique identification number. Default is an empty string. To retrieve actual values GET call needs to be made, with device id and included in select parameter. Supports: $select. $Search is not supported. Read-only. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "imei": {
          "type": "string",
          "description": "IMEI. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "isEncrypted": {
          "type": "boolean",
          "description": "Device encryption status. This property is read-only.",
          "readOnly": true
        },
        "isSupervised": {
          "type": "boolean",
          "description": "Device supervised status. This property is read-only.",
          "readOnly": true
        },
        "jailBroken": {
          "type": "string",
          "description": "Whether the device is jail broken or rooted. Default is an empty string. Supports $filter operator 'eq' and 'or'. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "lastSyncDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "The date and time that the device last completed a successful sync with Intune. Supports $filter operator 'lt' and 'gt'. This property is read-only.",
          "format": "date-time",
          "readOnly": true
        },
        "managedDeviceName": {
          "type": "string",
          "description": "Automatically generated name to identify a device. Can be overwritten to a user friendly name.",
          "nullable": true
        },
        "managedDeviceOwnerType": {
          "$ref": "#/components/schemas/microsoft.graph.managedDeviceOwnerType"
        },
        "managementAgent": {
          "$ref": "#/components/schemas/microsoft.graph.managementAgentType"
        },
        "managementCertificateExpirationDate": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "Reports device management certificate expiration date. This property is read-only.",
          "format": "date-time",
          "readOnly": true
        },
        "managementState": {
          "$ref": "#/components/schemas/microsoft.graph.managementState"
        },
        "manufacturer": {
          "type": "string",
          "description": "Manufacturer of the device. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "meid": {
          "type": "string",
          "description": "MEID. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "model": {
          "type": "string",
          "description": "Model of the device. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "notes": {
          "type": "string",
          "description": "Notes on the device created by IT Admin. Default is null. To retrieve actual values GET call needs to be made, with device id and included in select parameter. Supports: $select. $Search is not supported.",
          "nullable": true
        },
        "operatingSystem": {
          "type": "string",
          "description": "Operating system of the device. Windows, iOS, etc. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "osVersion": {
          "type": "string",
          "description": "Operating system version of the device. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "partnerReportedThreatState": {
          "$ref": "#/components/schemas/microsoft.graph.managedDevicePartnerReportedHealthState"
        },
        "phoneNumber": {
          "type": "string",
          "description": "Phone number of the device. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "physicalMemoryInBytes": {
          "type": "number",
          "description": "Total Memory in Bytes. Default is 0. To retrieve actual values GET call needs to be made, with device id and included in select parameter. Supports: $select. Read-only. This property is read-only.",
          "format": "int64",
          "readOnly": true
        },
        "remoteAssistanceSessionErrorDetails": {
          "type": "string",
          "description": "An error string that identifies issues when creating Remote Assistance session objects. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "remoteAssistanceSessionUrl": {
          "type": "string",
          "description": "Url that allows a Remote Assistance session to be established with the device. Default is an empty string. To retrieve actual values GET call needs to be made, with device id and included in select parameter. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "requireUserEnrollmentApproval": {
          "type": "boolean",
          "description": "Reports if the managed iOS device is user approval enrollment. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "serialNumber": {
          "type": "string",
          "description": "SerialNumber. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "subscriberCarrier": {
          "type": "string",
          "description": "Subscriber Carrier. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "totalStorageSpaceInBytes": {
          "type": "number",
          "description": "Total Storage in Bytes. This property is read-only.",
          "format": "int64",
          "readOnly": true
        },
        "udid": {
          "type": "string",
          "description": "Unique Device Identifier for iOS and macOS devices. Default is an empty string. To retrieve actual values GET call needs to be made, with device id and included in select parameter. Supports: $select. $Search is not supported. Read-only. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "userDisplayName": {
          "type": "string",
          "description": "User display name. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "userId": {
          "type": "string",
          "description": "Unique Identifier for the user associated with the device. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "userPrincipalName": {
          "type": "string",
          "description": "Device user principal name. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "wiFiMacAddress": {
          "type": "string",
          "description": "Wi-Fi MAC. This property is read-only.",
          "nullable": true,
          "readOnly": true
        },
        "deviceCategory": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.deviceCategory"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "description": "Device category",
          "x-ms-navigationProperty": true
        },
        "deviceCompliancePolicyStates": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.deviceCompliancePolicyState"
          },
          "description": "Device compliance policy states for this device.",
          "x-ms-navigationProperty": true
        },
        "deviceConfigurationStates": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.deviceConfigurationState"
          },
          "description": "Device configuration states for this device.",
          "x-ms-navigationProperty": true
        },
        "logCollectionRequests": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.deviceLogCollectionResponse"
          },
          "description": "List of log collection requests",
          "x-ms-navigationProperty": true
        },
        "users": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.user"
          },
          "description": "The primary users associated with the managed device.",
          "x-ms-navigationProperty": true
        },
        "windowsProtectionState": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.windowsProtectionState"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "description": "The device protection status. This property is read-only.",
          "x-ms-navigationProperty": true
        },
        "@odata.type": {
          "type": "string"
        }
      },
      "description": "Devices that are managed or pre-enrolled through Intune. Limited support for $filter: Only properties whose descriptions mention support for $filter may be used, and combinations of those filtered properties must use 'and', not 'or'."
    }
  ],
  "x-ms-discriminator-value": "#microsoft.graph.managedDevice"
}

Work with this as data

Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for schemas

4 MCP tools reach this
  • find_json_schemasBrowse and filter every JSON Schema in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This JSON Schema
curl "https://apis.io/api/v1/json-schemas/microsoft-graph-microsoftgraphmanageddevice"
All schemas
curl "https://apis.io/api/v1/json-schemas?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.