The report types are organized into the following focus areas:
- Operational – Provides timely, targeted data that helps you focus and take action. Admins, subject matter experts, and helpdesk will find these reports most helpful.
- Organizational – Provides a broader summary of an overall view, such as device management state. Managers and admins will find these reports most helpful.
- Historical – Provides patterns and trends over a period of time. Managers and admins will find these reports most helpful.
- Specialist – Allows you to use raw data to create your own custom reports. Admins will find these reports most helpful.
The reporting framework provides a consistent and more comprehensive reporting experience. The available reports provide the following functionality:
- Search and sort – You can search and sort across every column, no matter how large the dataset.
- Data paging – You can scan your data based on paging, either page-by-page or by jumping to a specific page.
- Performance – You can quickly generate and view reports created from large tenants.
- Export – You can quickly export reporting data generated from large tenants.
Who can access the data?
Users with the following permissions can review logs:
- Global Administrator
- Intune Service Administrator
- Administrators assigned to an Intune role with Read permissions
Non-compliant devices report (Operational)
The Non-compliant devices report surfaces data typically used by Helpdesk or admin roles to identify problems and help remediate issues. The data found in these reports is timely, calls out unexpected behavior, and is meant to be actionable. The report is available alongside the workload, making the non-compliant devices report accessible without browsing away from active workflows. This report provides filtering, searching, paging, and sorting capabilities. Also, you can drill down to help troubleshoot.
Device compliance trend report (Historical)
Device compliance trend reports are more likely to be used by admins and architects to identify long term trends for device compliance. The aggregated data is displayed over a period of time, and is useful for making future investment decisions, driving process improvements, or prompting investigation into any anomalies. Filters can also be applied to see specific trends. The data provided by this report is a snapshot of the current tenant state (near real-time).
A device compliance trend report for device compliance trends can show the trend of device compliance states over a period of time. You can identify where compliance peaks occurred and focus your time and effort accordingly.
Azure Monitor integration reports (Specialist)
You can customize your own reports to get the data you want. The data in your reports will optionally be available via Azure Monitor using Log Analytics and Azure Monitor workbooks. These solutions allow you to create custom queries, configure alerts, and make dashboards to show the device compliance data in the manner you want. Additionally, you can retain the activity logs in your Azure storage account, integrate with the reports using security information and event management (SIEM) tools, and correlate the reports to Azure AD activity logs. Azure Monitor workbooks can be used in addition to importing dashboards for custom reporting needs.