Name: Microsoft Intune device compliance digest
Author: recued-core

Microsoft Intune device compliance digest

by recued-core v1

Scheduled read-only Microsoft Intune endpoint-management digest. It reads bounded pages of noncompliant or risky managed devices, compliance policies, configuration profiles, detected apps, mobile apps, and Intune audit events through recued-core.microsoft-intune, renders compact tables, and optionally sends an in-app nudge when matching devices are visible. It never wipes, retires, deletes, reboots, shuts down, resets passcodes, bypasses activation lock, mutates policies or apps, changes roles, or calls arbitrary Graph APIs.

How it works 33 steps

Inspect the data fetches, transforms, gates, and output this recipe runs.

Process (33 steps)

■ managed_devices_raw ?

■ policies_raw ?

■ configurations_raw ?

■ detected_apps_raw ?

■ mobile_apps_raw ?

■ audits_raw ?

■ managed_devices default

Apply default

■ policies default

Apply default

■ configurations default

Apply default

■ detected_apps default

Apply default

■ mobile_apps default

Apply default

■ audits default

Apply default

■ managed_device_count count

Count items in managed devices

■ policy_count count

Count items in policies

■ configuration_count count

Count items in configurations

■ detected_app_count count

Count items in detected apps

■ mobile_app_count count

Count items in mobile apps

■ audit_count count

Count items in audits

■ has_devices compare

Check if managed device count is greater than 0

■ notify_enabled compare

Check if setting notify when devices equals true

■ should_notify all

Check if all conditions are true

■ notify ?

skip: step.should_notify not_equal true

■ managed_device_rows slice

Take a subset of

■ policy_rows slice

Take a subset of

■ configuration_rows slice

Take a subset of

■ detected_app_rows slice

Take a subset of

■ audit_rows slice

Take a subset of

■ managed_device_table to_table