How to get device configuration profiles using Microsoft Graph PowerShell

The Get-MgDeviceManagementDeviceConfiguration cmdlet retrieves all device configuration profiles from Microsoft Intune through Microsoft Graph. These profiles define and enforce policies on managed devices, such as password requirements, encryption, and VPN settings. By using this cmdlet, admins can quickly list and review existing device configurations and export details for compliance or troubleshooting. It is particularly useful when managing large environments, where accessing configurations directly from the Intune portal can get time-consuming.

Getting device configuration profiles using Microsoft Graph PowerShell

Prerequisites

Install the Microsoft Graph PowerShell module and connect with device management read permissions:

Using the Get-MgDeviceManagementDeviceConfiguration cmdlet

To retrieve a list of profiles, simply run:

Examples

Example 1: List available device configuration profiles

Example 2: Retrieve a configuration profile by ID

Example 3: Filter device configurations by display name containing “WiFi”

Supported parameters

The following are some essential parameters that can be used along with the Get-MgDeviceManagementDeviceConfiguration cmdlet:

Limitations of using Microsoft Graph PowerShell to get application role assignments

• PowerShell commands can get complex with different use cases and scenarios.
• IT admins can spend a lot of time troubleshooting errors, which in turn negatively impacts productivity.
• Delegation can get tricky since technicians require elevated permissions.