Device

All devices (computers, phones) that are registered in Entra ID

Part of the Entra ID inventory.

Scan settings

Default scanning interval	Allowed scanning intervals	Data removal during incremental scan
Daily	Daily, Weekly, Bi-Weekly, Monthly, Never, Initial	Yes

Properties

Property	Type	Description	Automation placeholder
Account Enabled	Boolean	true if the account is enabled; otherwise, false.	{{Device.AccountEnabled}}
Approximate Last Sign In Date	DateTime	The timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.	{{Device.ApproximateLastSignInDateTime}}
Compliance Expiration Date	DateTime	The timestamp when the device is no longer deemed compliant. The timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.	{{Device.ComplianceExpirationDateTime}}
Initially Scanned	DateTime	Shows when this object was initially found in a scan.	{{Device.CreatedTime}}
Id	String	The unique identifier for the device.	{{Device.DeviceEntityId}}
Device Id	String	Unique identifier set by Azure Device Registration Service at the time of registration.	{{Device.DeviceId}}
Device Metadata	String	For internal use only.	{{Device.DeviceMetadata}}
Device Ownership	String	Ownership of the device. This property is set by Intune. Possible values are: unknown, company, personal. Allowed values: Company, Personal, Unknown.	{{Device.DeviceOwnership}}
Device Version	Int32	For internal use only.	{{Device.DeviceVersion}}
Display Name	String		{{Device.DisplayName}}
Is Compliant	Boolean	true if the device complies with Mobile Device Management (MDM) policies; otherwise, false. This can only be updated by Intune for any device OS type or by an approved MDM app for Windows OS devices.	{{Device.IsCompliant}}
Is Managed	Boolean	true if the device is managed by a Mobile Device Management (MDM) app; otherwise, false. This can only be updated by Intune for any device OS type or by an approved MDM app for Windows OS devices.	{{Device.IsManaged}}
Last scan update	DateTime	Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change.	{{Device.LastModifiedTime}}
Manufacturer	String	Manufacturer of the device.	{{Device.Manufacturer}}
Mdm App Id	String	Application identifier used to register device into MDM.	{{Device.MdmAppId}}
Model	String	Model of the device.	{{Device.Model}}
On Premises Last Sync Date	DateTime	The last time at which the object was synced with the on-premises directory. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.	{{Device.OnPremisesLastSyncDateTime}}
On Premises Sync Enabled	Boolean	true if this object is synced from an on-premises directory; false if this object was originally synced from an on-premises directory but is no longer synced; null if this object has never been synced from an on-premises directory (default).	{{Device.OnPremisesSyncEnabled}}
Operating System	String	The type of operating system on the device.	{{Device.OperatingSystem}}
Operating System Version	String	The version of the operating system on the device.	{{Device.OperatingSystemVersion}}
Profile Type	String	The profile type of the device. Possible values: RegisteredDevice (default), SecureVM, Printer, Shared, IoT. Allowed values: IoT, Printer, RegisteredDevice, SecureVM, Shared.	{{Device.ProfileType}}
Risk Score	Int32	Stores risk score	{{Device.RiskScore}}
Risk Score Update	DateTime	Stores risk score update	{{Device.RiskScoreLastUpdate}}
Risk Score Value	String	Stores risk score value like Low_Low	{{Device.RiskScoreValue}}
Trust Type	String	Type of trust for the joined device. Possible values: Workplace (indicates bring your own personal devices), AzureAd (Cloud only joined devices), EntraID (on-premises domain joined devices joined to Entra ID). Allowed values: EntraID, ServerAd, Workplace.	{{Device.TrustType}}

Relations

Relation	Service	Description
User	Microsoft 365	User who ownes the device
User	Microsoft 365	User who uses the device

Segments

This object does currently not have any segments.

Actions

This object does currently not have any actions.

Policies that check this object

Policy	Severity	Description
Devices with disabled user accounts	Medium	Shows devices with disabled owners or user accounts