Automating Intune Hardware & Managed App Inventory Telemetry Extraction to PowerBI via Microsoft Graph API

# ==============================================================================
# Automated Intune Telemetry Harvester for PowerBI
# ==============================================================================
[CmdletBinding()]
param(
    [Parameter(Mandatory = $true)]
    [string]$TenantId,

    [Parameter(Mandatory = $true)]
    [string]$ClientId,

    [Parameter(Mandatory = $true)]
    [string]$CertThumbprint,

    [Parameter(Mandatory = $false)]
    [string]$OutputDir = "$PSScriptRoot\Export"
)

if (-not (Test-Path $OutputDir)) { New-Item -Path $OutputDir -ItemType Directory -Force | Out-Null }

Write-Host ">>> [1/3] Authenticating to Microsoft Graph via Certificate..." -ForegroundColor Cyan
Connect-MgGraph -TenantId $TenantId -ClientId $ClientId -CertificateThumbprint $CertThumbprint -NoWelcome

# 1. Harvest Managed Devices Hardware Telemetry
Write-Host ">>> [2/3] Querying /deviceManagement/managedDevices with pagination..." -ForegroundColor Cyan
$deviceUri = "https://graph.microsoft.com/beta/deviceManagement/managedDevices?`$select=id,deviceName,serialNumber,manufacturer,model,operatingSystem,osVersion,totalStorageSpaceInBytes,freeStorageSpaceInBytes,userPrincipalName,complianceState,lastSyncDateTime,enrolledDateTime,chassisType,hardwareInformation"

$allDevices = [System.Collections.Generic.List[PSObject]]::new()

do {
    $response = Invoke-MgGraphRequest -Method GET -Uri $deviceUri
    if ($response.value) {
        foreach ($d in $response.value) {
            $totalGB = [math]::Round(($d.totalStorageSpaceInBytes / 1GB), 2)
            $freeGB  = [math]::Round(($d.freeStorageSpaceInBytes / 1GB), 2)
            $usedPct = if ($totalGB -gt 0) { [math]::Round((($totalGB - $freeGB) / $totalGB) * 100, 1) } else { 0 }

            $allDevices.Add([PSCustomObject]@{
                DeviceId          = $d.id
                DeviceName        = $d.deviceName
                SerialNumber      = $d.serialNumber
                Manufacturer      = $d.manufacturer
                Model             = $d.model
                OS                = $d.operatingSystem
                OSVersion         = $d.osVersion
                TotalStorageGB    = $totalGB
                FreeStorageGB     = $freeGB
                StorageUsedPct    = $usedPct
                UserPrincipalName = $d.userPrincipalName
                ComplianceState   = $d.complianceState
                LastSyncDateTime  = $d.lastSyncDateTime
                EnrolledDateTime  = $d.enrolledDateTime
                TPMVersion        = $d.hardwareInformation.tpmSpecificationVersion
                BatteryHealthPct  = $d.hardwareInformation.batteryHealthPercentage
            })
        }
    }
    $deviceUri = $response.'@odata.nextLink'
} while ($deviceUri)

$devicesCsv = "$OutputDir\Intune_Devices_Inventory.csv"
$allDevices | Export-Csv -Path $devicesCsv -NoTypeInformation -Encoding UTF8
Write-Host "Exported $($allDevices.Count) devices to $devicesCsv" -ForegroundColor Green

# 2. Harvest Detected Applications Catalog
Write-Host ">>> [3/3] Querying /deviceManagement/detectedApps..." -ForegroundColor Cyan
$appUri = "https://graph.microsoft.com/beta/deviceManagement/detectedApps?`$select=id,displayName,version,publisher,sizeInByte,deviceCount"
$allApps = [System.Collections.Generic.List[PSObject]]::new()

do {
    $appResponse = Invoke-MgGraphRequest -Method GET -Uri $appUri
    if ($appResponse.value) {
        foreach ($a in $appResponse.value) {
            $allApps.Add([PSCustomObject]@{
                AppId       = $a.id
                DisplayName = $a.displayName
                Version     = $a.version
                Publisher   = $a.publisher
                SizeMB      = [math]::Round(($a.sizeInByte / 1MB), 2)
                DeviceCount = $a.deviceCount
            })
        }
    }
    $appUri = $appResponse.'@odata.nextLink'
} while ($appUri)

$appsCsv = "$OutputDir\Intune_Detected_Apps.csv"
$allApps | Export-Csv -Path $appsCsv -NoTypeInformation -Encoding UTF8
Write-Host "Exported $($allApps.Count) application records to $appsCsv" -ForegroundColor Green