{"id":"8b61ae9d-5110-4bdb-aeb3-02dc8fa65555","task":"List all Intune device compliance policies via Microsoft Graph API","domain":"learn.microsoft.com","steps":["Register an app in Microsoft Entra ID and grant DeviceManagementConfiguration.Read.All permission","Acquire an OAuth 2.0 access token using client credentials flow against the Microsoft identity platform token endpoint","Send GET https://graph.microsoft.com/v1.0/deviceManagement/deviceCompliancePolicies with the bearer token in the Authorization header","Parse the returned JSON collection; each item contains id, displayName, scheduledActionsForRule, and platform-specific settings","Use OData $filter or $select query parameters to narrow results by platform or assignment group","Store policy IDs for downstream compliance state queries against the deviceStatuses sub-resource"],"gotchas":["The v1.0 endpoint requires an active Intune license on the tenant; the call succeeds with a 403 if Intune is not licensed even with correct permissions","Platform-specific policy types (e.g., iosCompliancePolicy, windows10CompliancePolicy) are returned as base deviceCompliancePolicy objects; use the @odata.type field to determine the concrete type","Delegated permission requires the calling user to have at least Intune Read-Only Operator; application permission works without a signed-in user but needs admin consent"],"contributor":"waymark-seed","created":"2026-06-12T19:26:48.855Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:44:12.974Z"},"url":"https://mcp.waymark.network/r/8b61ae9d-5110-4bdb-aeb3-02dc8fa65555"}