Edit

Share via

managedDeviceEncryptionState resource type

Namespace: microsoft.graph

Important: Microsoft supports Intune /beta APIs, but they are subject to more frequent change. Microsoft recommends using version v1.0 when possible. Check an API's availability in version v1.0 using the Version selector.

Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.

Encryption report per device

Methods

Method Return Type Description
List managedDeviceEncryptionStates managedDeviceEncryptionState collection List properties and relationships of the managedDeviceEncryptionState objects.
Get managedDeviceEncryptionState managedDeviceEncryptionState Read properties and relationships of the managedDeviceEncryptionState object.
Create managedDeviceEncryptionState managedDeviceEncryptionState Create a new managedDeviceEncryptionState object.
Delete managedDeviceEncryptionState None Deletes a managedDeviceEncryptionState.
Update managedDeviceEncryptionState managedDeviceEncryptionState Update the properties of a managedDeviceEncryptionState object.

Properties

Property Type Description
id String Key of the entity.
userPrincipalName String User name
deviceType deviceTypes Platform of the device. Possible values are: desktop, windowsRT, winMO6, nokia, windowsPhone, mac, winCE, winEmbedded, iPhone, iPad, iPod, android, iSocConsumer, unix, macMDM, holoLens, surfaceHub, androidForWork, androidEnterprise, blackberry, palm, unknown.
osVersion String Operating system version of the device
tpmSpecificationVersion String Device TPM Version
deviceName String Device name
encryptionReadinessState encryptionReadinessState Encryption readiness state. Possible values are: notReady, ready.
encryptionState encryptionState Device encryption state. Possible values are: notEncrypted, encrypted.
encryptionPolicySettingState complianceStatus Encryption policy setting state. Possible values are: unknown, notApplicable, compliant, remediated, nonCompliant, error, conflict, notAssigned.
advancedBitLockerStates advancedBitLockerState Advanced BitLocker State. Possible values are: success, noUserConsent, osVolumeUnprotected, osVolumeTpmRequired, osVolumeTpmOnlyRequired, osVolumeTpmPinRequired, osVolumeTpmStartupKeyRequired, osVolumeTpmPinStartupKeyRequired, osVolumeEncryptionMethodMismatch, recoveryKeyBackupFailed, fixedDriveNotEncrypted, fixedDriveEncryptionMethodMismatch, loggedOnUserNonAdmin, windowsRecoveryEnvironmentNotConfigured, tpmNotAvailable, tpmNotReady, networkError.
fileVaultStates fileVaultState FileVault State. Possible values are: success, driveEncryptedByUser, userDeferredEncryption, escrowNotEnabled.
policyDetails encryptionReportPolicyDetails collection Policy Details

Relationships

None

JSON Representation

Here is a JSON representation of the resource.

{
  "@odata.type": "#microsoft.graph.managedDeviceEncryptionState",
  "id": "String (identifier)",
  "userPrincipalName": "String",
  "deviceType": "String",
  "osVersion": "String",
  "tpmSpecificationVersion": "String",
  "deviceName": "String",
  "encryptionReadinessState": "String",
  "encryptionState": "String",
  "encryptionPolicySettingState": "String",
  "advancedBitLockerStates": "String",
  "fileVaultStates": "String",
  "policyDetails": [
    {
      "@odata.type": "microsoft.graph.encryptionReportPolicyDetails",
      "policyId": "String",
      "policyName": "String"
    }
  ]
}