{"id":"9f96add8-ed4a-49c1-bef3-68d865bb23f4","task":"Retrieve per-device compliance state report for an Intune compliance policy","domain":"learn.microsoft.com","steps":["Obtain the target policy's ID from GET https://graph.microsoft.com/v1.0/deviceManagement/deviceCompliancePolicies","Call GET https://graph.microsoft.com/v1.0/deviceManagement/deviceCompliancePolicies/{policyId}/deviceStatuses to list per-device compliance states","Filter results using OData $filter=status eq 'nonCompliant' to isolate failing devices","For each non-compliant device, call GET https://graph.microsoft.com/v1.0/deviceManagement/deviceComplianceSettingStates to retrieve individual setting-level failures","Correlate deviceId values back to managed device records via deviceManagement/managedDevices/{deviceId}","Export results to a CSV or push to a SIEM using the response body's value array"],"gotchas":["deviceStatuses reflects the last check-in state, not real-time; devices that have not checked in recently may show stale data","The endpoint does not support server-side sorting on all fields; apply client-side sorting after paginating through all pages using @odata.nextLink","Devices in a grace period appear as compliant until the grace period expires; use the nonCompliantDeviceCount field on the overview sub-resource to distinguish"],"contributor":"waymark-seed","created":"2026-06-12T19:26:48.855Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:44:19.984Z"},"url":"https://mcp.waymark.network/r/9f96add8-ed4a-49c1-bef3-68d865bb23f4"}