Use Graph Explorer to view your Intune Admin Tasks?
Recently Microsoft has released the Admin Tasks node in the Intune Console. This feature is in preview and is designed to give you an overview of some specific task at require some attention. If you are an administrator for more then one organization or tenant and you want to view these tasks without logging into the Intune portal you can make use of the Microsoft Graph Explorer to fetch these tasks, but there is a caveat, read on to find out
Admin Tasks from the Console
Microsoft has released the public preview of Admin Tasks in Microsoft Intune. With this feature you will have a central place to manage and view your administrative tasks and user elevation requests. At this time the following tasks are available in this feature:
- Endpoint Privilege Management file elevation requests
- Microsoft Defender security tasks
- Multi Admin Approval requests
To view tasks for your account navigate in the Intune console to:
Tenant administration > Admin tasks
In the print screen I've created a multi admin approval for remote wipe action, this is a pending request.
From here we can click on the approval and we can approve or deny the request. This is a great way to view and handle your requests
Fetch Admin Tasks with Graph Explorer
If you are managing multiple tenants, the steps above require you to log in to multiple environments to see the tasks. Luckily we can make use of the Graph Explorer, sure you also need to login, but with one command we can view the tasks and the current status. Browse to the Graph Explorer in your browser (https://developer.microsoft.com/en-us/graph/graph-explorer)
Connect to your tenant of choice with an account which has the correct permissions and also has the function to view Admin tasks.
Use the following query to get the admin tasks from the Graph Explorer:
https://graph.microsoft.com/beta/devicemanagement/administrativetasks
Make sure you are using the Beta version. When there is an error response in the preview, make sure you have the correct permissions. You can give a consent for this by selecting Modify Permissions and use the link Open the permissions panel to adjust the permissions.
Give a consent for DeviceManagementConfiguration.Read.All to read the information. With the right consent in place, we can fetch the information.
Run Query, read the results
When we run the query and there is no Admin tasks available we will see the following result, it will display not a lot of information, so there are no Admin Tasks.
When we run the query and there is an Admin task pending we will see the following result:
In this example the Remote Wipe action is listed with also the status ActionRequired. Now we can head-over tho the Intune portal to see the Admin Task and proceed from there the handle the request.
When we run the query after the approval is accepted from the Intune portal we will see the following results.
In this example the Remote Wipe request is approved, notice the status, it's change to approved. But beware, here is the Caveat!!!
We still need to complete the request, otherwise the approval is not completed successfully, the status can be misleading
Maybe this has to do with the type of incident that is created, but be aware that an approved status still can require an action.
Recap
With the Admin Tasks in de Intune Portal we have an nice overview of the current available Admin Tasks and we can handle them from there. Good to know we can fetch these results with the Graph Explorer in the Beta version, but beware that the status can be misleading, so is a good way to find out if there a tasks but to get the precieze information the best way is still the Intune portal.