Forum Discussion

RobV's avatar
RobV
Copper Contributor
Jun 02, 2026

Intune App inventory Graph

Hi All, 

I've enabled the configuration profile to receive app inventory data in Intune.

In the GUI the data I can view the data just fine, but I would like to use Graph to automate this data and create custom reports.

When I use the following https://graph.microsoft.com/beta/deviceManagement/managedDevices/[device-id]/deviceInventories('ApplicationProperties') I get an error: "Forbidden - 403 - 199 ms Either the signed-in user does not have sufficient privileges, or you need to consent to one of the permissions on the Modify permissions tab" even though the docs I can find about permissions are OK.

Graph API
intune
mobile device management (mdm)
Software Management

2 Replies

  • Jamony's avatar
    Jamony
    MCT
    Jul 08, 2026

    Hi, if the app inventory is visible in the Intune UI but not where you expect in Graph, I would first confirm which inventory feature is providing the data.

     

    I would check:

     

    1. Whether the data is device detected apps, managed apps, or advanced app inventory.

    2. The Graph endpoint and API version you are querying.

    3. Permissions granted to the app registration.

    4. Whether the data is available in beta only.

    5. Whether there is a reporting/export endpoint better suited than device-by-device Graph calls.

     

    The UI sometimes uses reporting backends that do not map one-to-one with the obvious Graph endpoint.

  • AladinH's avatar
    AladinH
    Iron Contributor
    Jun 04, 2026

    Hi RobV​,

    I’d check the permission/consent model first. For Intune inventory data, the permission usually needs to be granted at the Graph app level, not only available to the signed-in user. Try with DeviceManagementManagedDevices.Read.All granted and admin-consented, then test again in Graph Explorer or with an app registration. Also keep in mind this is a /beta endpoint, so behavior may not always match the portal experience.