Get-MgmtGraphDeviceCompliancePolicyUserStatus

MgmtGraph: Audits user status for an Intune compliance policy

Script

#Requires -Version 5.1
#Requires -Modules Microsoft.Graph.DeviceManagement

[CmdletBinding()]
Param (
    [Parameter(Mandatory = $true, Position = 0)]
    [string]$PolicyId,

    [string]$StatusId
)

Process {
    try {
        $params = @{
            'DeviceCompliancePolicyId' = $PolicyId
            'ErrorAction'              = 'Stop'
        }

        if ($StatusId) {
            $params.Add('DeviceComplianceUserStatusId', $StatusId)
        }
        else {
            $params.Add('All', $true)
        }

        $statuses = Get-MgDeviceManagementDeviceCompliancePolicyUserStatuses @params
        
        $results = foreach ($s in $statuses) {
            [PSCustomObject]@{
                UserDisplayName   = $s.UserDisplayName
                UserPrincipalName = $s.UserPrincipalName
                Status            = $s.Status
                LastReported      = $s.LastReportedDateTime
                DevicesCount      = $s.DevicesCount
                Id                = $s.Id
                Timestamp         = Get-Date -Format "yyyy-MM-dd HH:mm:ss"
            }
        }

        Write-Output ($results | Sort-Object UserPrincipalName)
    }
    catch {
        throw
    }
}

Customize

PolicyId string

Specifies the ID of the device compliance policy.

StatusId string

Optional. Specifies the ID of a specific user compliance status to retrieve. If omitted, all user statuses for the policy are listed.