Intune App inventory Graph

Worth ruling out one thing first since it's causing a lot of confusion right now: this is a GET, and Multi Admin Approval (rolled out with 2606) only intercepts write calls, so that's not it here. More likely culprit: deviceInventories is a /beta navigation property and beta schemas move — worth confirming the exact property name/casing against the current beta metadata rather than an older sample. If that's not it, the deviceManagement/reports export-job path (app inventory report) is the more stable alternative to a per-device beta call — happy to share the exact working request body once I've re-verified it in my own lab, since three of you hitting the same 403 suggests something changed under the endpoint, not a permissions gap.