How to assign a group to a device configuration?

Shannon Hagmaier 0 Microsoft Employee

In C# I am using the graph sdk to create a device configuration and I am trying to assign it to a security group but keep getting an OData error message. I am following the instructions from this link: https://learn.microsoft.com/en-us/graph/api/intune-deviceconfig-deviceconfiguration-assign?view=graph-rest-1.0&tabs=csharp . Is there any other way to assign a group to a device configuration that was successfully created?

1 answer

Yakun Huang-MSFT 8,665 Reputation points Microsoft Vendor

2025-01-06T02:14:45.3966667+00:00

Hello Shannon Hagmaier,

Thank you for reaching out to Microsoft Support!

Graph API only provides the endpoint for assign device configuration, you can share your code and error information, we will help you further, or you can assign in Intune, the reference document is as follows:

https://learn.microsoft.com/en-us/mem/intune/configuration/device-profiles

Hope this helps.

If the answer is helpful, please click Accept Answer and kindly upvote it. If you have any further questions about this answer, please click Comment.
Please sign in to rate this answer.
Shannon Hagmaier 0 Reputation points Microsoft Employee

2025-01-06T12:29:43.2666667+00:00

Hi @Yakun Huang-MSFT thank you for the response. To confirm, to assign a group I have to use the endpoint directly instead of using the sdk?

Yakun Huang-MSFT 8,665 Reputation points Microsoft Vendor

2025-01-07T08:30:44.2233333+00:00

The use of Graph SDK is supported, for your problem, it may be the problem of getting tokens or calling procedures, hope you share your error information and code, we will further help you solve the problem.

Shannon Hagmaier 0 Reputation points Microsoft Employee

2025-01-07T12:57:53+00:00

Ok great that is what I was trying, the error message that I am getting is

$exception {"{\r\n "_version": 3,\r\n "Message": "An error has occurred - Operation ID (for customer support): 00000000-0000-0000-0000-000000000000 - Activity ID: 885aec95-0b30-4b29-8092-17e1f3bd0579 - Url: https://fef.amsua0102.manage.microsoft.com/DeviceConfiguration_2412/StatelessDeviceConfigurationFEService/deviceManagement/deviceConfigurations('config_id')/microsoft.management.services.api.assign?api-version=2022-06-13\",\r\n "CustomApiErrorPhrase": "",\r\n "RetryAfter": null,\r\n "ErrorSourceService": "",\r\n "HttpHeaders": "{}"\r\n}"} Microsoft.Graph.Models.ODataErrors.ODataError

since it said that it was an OData error I tried to set the ODataType of the ConfiguationManagerCollectionAssignmentTarget to "microsoft.graph.configurationManagerCollectionAssignmentTarget" as was in the documentation and also "#microsoft.graph.configurationManagerCollectionAssignmentTarget" but was getting the same error both ways

Shannon Hagmaier 0 Reputation points Microsoft Employee

2025-01-07T13:00:18.7+00:00

Ok great that is what I was trying to use. The error that I am getting is

$exception {"{\r\n "_version": 3,\r\n "Message": "An error has occurred - Operation ID (for customer support): 00000000-0000-0000-0000-000000000000 - Activity ID: 885aec95-0b30-4b29-8092-17e1f3bd0579 - Url: https://fef.amsua0102.manage.microsoft.com/DeviceConfiguration_2412/StatelessDeviceConfigurationFEService/deviceManagement/deviceConfigurations('config_id')/microsoft.management.services.api.assign?api-version=2022-06-13\",\r\n "CustomApiErrorPhrase": "",\r\n "RetryAfter": null,\r\n "ErrorSourceService": "",\r\n "HttpHeaders": "{}"\r\n}"} Microsoft.Graph.Models.ODataErrors.ODataError

Since it says that it is an ODataError I had tried setting the ODataType of the ConfigurationManagerCollectionAssignmentTarget to "microsoft.graph.configurationManagerCollectionAssignmentTarget" as is in the documentation and also "#microsoft.graph.configurationManagerCollectionAssignmentTarget" but was getting the same error both ways.

Yakun Huang-MSFT 8,665 Reputation points Microsoft Vendor

2025-01-08T09:13:58.35+00:00

Since you assign the object of the group, therefore, that you create a target object classes used should be GroupAssignmentTarget, rather than ConfigurationManagerCollectionAssignmentTarget.

My test code is shown below for your reference:

var requestBody = new AssignPostRequestBody { Assignments = new List<DeviceConfigurationAssignment> { new DeviceConfigurationAssignment { OdataType = "#microsoft.graph.deviceConfigurationAssignment", Id = "Your_ID", Target = new GroupAssignmentTarget { OdataType = "#microsoft.graph.groupAssignmentTarget", GroupId = "Group_Id", }, }, }, };

Shannon Hagmaier 0 Reputation points Microsoft Employee

2025-01-08T19:22:01.54+00:00

Thanks so much, changing it to GroupAssignmentTarget seems to have worked. One other question that I had was, is it possible to also exclude a group using the sdk?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How to assign a group to a device configuration?

1 answer

Your answer