Collectors/IntuneAppProtection.ps1

@{
    Name           = 'IntuneAppProtection'
    FileName       = 'intuneAppProtection'
    ApiVersion     = 'v1.0'
    RequiredScopes = @('DeviceManagementApps.Read.All')
    Description    = 'Intune app protection (MAM) policies for iOS and Android including assignments.'
    Collect        = {
        $iosPolicies = @(Invoke-TLGraphRequest -Uri '/v1.0/deviceAppManagement/iosManagedAppProtections?$expand=assignments' -All)
        $androidPolicies = @(Invoke-TLGraphRequest -Uri '/v1.0/deviceAppManagement/androidManagedAppProtections?$expand=assignments' -All)
        @{
            iosPolicies     = $iosPolicies
            androidPolicies = $androidPolicies
        }
    }
}