Get-PsIntuneDevice.ps1

function Get-psIntuneDevice {
    <#
    .SYNOPSIS
        Returns dataset of Intune-managed devices with inventoried apps
    .DESCRIPTION
        Returns dataset of Intune-managed devices with inventoried apps
    .PARAMETER UserName
        UserPrincipalName for authentication request
    .PARAMETER DeviceName
        Filter query to just one specified device by name. Default is query all devices
    .PARAMETER DeviceOS
        Filter devices by operating system. Options: Android, iOS, Windows, All
        Default is All
    .PARAMETER ShowProgress
        Display progress as data is exported (default is silent / no progress shown)
    .PARAMETER Detail
        Controls the level of granularity of the results:
        * Summary - returns basic device information only
        * Detailed - returns detailed device information
        * Full - returns detailed device information with installed applications
        * Raw - returns raw Graph API results only
    .PARAMETER graphApiVersion
        Graph API version. Default is "beta"
    .EXAMPLE
        $devices = Get-psIntuneDevice -UserName "john.doe@contoso.com" -DeviceName "Desktop123" -Detail Detailed
        Returns detailed data for one device without installed applications
    .EXAMPLE
        $devices = Get-psIntuneDevice -UserName "john.doe@contoso.com" -DeviceOS Windows -Detail Detailed
        Returns detailed data for Windows devices without applications
    .EXAMPLE
        $devices = Get-psIntuneDevice -UserName "john.doe@contoso.com"
        Returns summary data without applications
    .EXAMPLE
        $devices = Get-psIntuneDevice -UserName "john.doe@contoso.com" -ShowProgress
        Returns summary data without applications and shows progress during processing
    .EXAMPLE
        $devices = Get-psIntuneDevice -UserName "john.doe@contoso.com" -Detail -Full -ShowProgress
        Returns detailed data with applications for each device and shows progress during processing
    .NOTES
        NAME: Get-psIntuneDevice
    .LINK
        https://github.com/Skatterbrainz/ds-intune/blob/master/docs/Get-psIntuneDevice.md
    #>

    [CmdletBinding()]
    [OutputType([hashtable])]
    param (
        [parameter()][string] $UserName = $($global:psintuneuser),
        [parameter()][string] $DeviceName = "",
        [parameter()][ValidateSet('Full','Detailed','Summary','Raw')][string] $Detail = 'Summary',
        [parameter()][string][ValidateSet('All','Windows','Android','iOS')] $DeviceOS = 'All',
        [parameter()][boolean] $ShowProgress = $False,
        [parameter()][string] $graphApiVersion = "beta"
    )
    if ([string]::IsNullOrEmpty($UserName)) { throw "UserName was not provided" }
    $global:psintuneuser = $UserName
    try {
        if (![string]::IsNullOrEmpty($DeviceName)) {
            $devices = Get-ManagedDevices -Username $UserName -DeviceName $DeviceName
        }
        else {
            if ($DeviceOS -ne 'All') {
                $devices = Get-ManagedDevices -UserName $UserName -DeviceOS $DeviceOS
            }
            else {
                $devices = Get-ManagedDevices -UserName $UserName
            }
        }
        $dcount = $Devices.Count
        $dx = 1
        Write-Verbose "returned $dcount Intune managed devices"
        if ($Detail -eq 'Full') {
            Write-Warning "Full option takes the longest to process. This may take a few minutes."
        }
        foreach ($Device in $Devices){
            if ($ShowProgress -eq $True) { 
                Write-Progress -Activity "Found $dcount Intune managed devices" -Status "Reading device $dx of $dcount" -PercentComplete $(($dx/$dcount)*100) -id 1
            }
            $DeviceID = $Device.id
            $LastSync = $Device.lastSyncDateTime
            $SyncDays = (New-TimeSpan -Start $LastSync -End (Get-Date)).Days
            switch ($Detail) {
                'Summary' {
                    $upn = $Device.userPrincipalName
                    if (![string]::IsNullOrEmpty($upn)) {
                        $dom = $($upn -split '@')[1]
                    } else {
                        $dom = ""
                    }
                    [pscustomobject]@{
                        DeviceName   = $Device.DeviceName
                        DeviceID     = $DeviceID
                        UserName     = $Device.userDisplayName
                        Domain       = $dom
                        OSName       = $Device.operatingSystem 
                        OSVersion    = $Device.osVersion
                        LastSyncTime = $LastSync
                        LastSyncDays = $SyncDays
                    }    
                }
                'Detailed' {
                    $compliant = $($Device.complianceState -eq $True)
                    $disksize  = [math]::Round(($Device.totalStorageSpaceInBytes / 1GB),2)
                    $freespace = [math]::Round(($Device.freeStorageSpaceInBytes / 1GB),2)
                    $mem       = [math]::Round(($Device.physicalMemoryInBytes / 1GB),2)
                    $upn       = $Device.userPrincipalName
                    if (![string]::IsNullOrEmpty($upn)) {
                        $dom = $($upn -split '@')[1]
                    } else {
                        $dom = ""
                    }
                    [pscustomobject]@{
                        DeviceName   = $Device.DeviceName
                        DeviceID     = $DeviceID
                        Manufacturer = $Device.manufacturer
                        Model        = $Device.model 
                        UserName     = $Device.userDisplayName
                        UserEmail    = $Device.emailAddress
                        UserUPN      = $upn
                        Domain       = $dom
                        ManageState  = $Device.managementState
                        Encrypted    = $Device.isEncrypted
                        Registration = $Device.deviceRegistrationState
                        Enrollment   = $Device.deviceEnrollmentType
                        AzureADDevID = $Device.azureADDeviceId
                        AutoPilot    = $Device.autopilotEnrolled
                        EthernetMAC  = $Device.ethernetMacAddress
                        WiFiMAC      = $Device.WiFiMacAddress
                        MemoryGB     = $mem
                        DiskSizeGB   = $disksize
                        FreeSpaceGB  = $freespace
                        SerialNumber = $Device.serialNumber 
                        OSName       = $Device.operatingSystem 
                        OSVersion    = $Device.osVersion
                        Ownership    = $Device.ownerType
                        Category     = $Device.deviceCategoryDisplayName
                        EnrollDate   = $Device.enrolledDateTime
                        ManagedBy    = $Device.managementAgent
                        LastSyncTime = $LastSync
                        LastSyncDays = $SyncDays
                        Compliant    = $compliant
                    }    
                }
                'Full' {
                    #Start-Sleep -Seconds 1
                    $uriApps = "https://graph.microsoft.com/$graphApiVersion/deviceManagement/manageddevices('$DeviceID')?`$expand=detectedApps"
                    $DetectedApps = (Invoke-RestMethod -Uri $uriApps -Headers $authToken -Method Get).detectedApps
                    $compliant = $($Device.complianceState -eq $True)
                    $disksize  = [math]::Round(($Device.totalStorageSpaceInBytes / 1GB),2)
                    $freespace = [math]::Round(($Device.freeStorageSpaceInBytes / 1GB),2)
                    $mem       = [math]::Round(($Device.physicalMemoryInBytes / 1GB),2)
                    $upn       = $Device.userPrincipalName
                    if (![string]::IsNullOrEmpty($upn)) {
                        $dom = $($upn -split '@')[1]
                    } else {
                        $dom = ""
                    }
                    [pscustomobject]@{
                        DeviceName   = $Device.DeviceName
                        DeviceID     = $DeviceID
                        Manufacturer = $Device.manufacturer
                        Model        = $Device.model 
                        UserName     = $Device.userDisplayName
                        UserEmail    = $Device.emailAddress
                        UserUPN      = $upn
                        Domain       = $dom
                        ManageState  = $Device.managementState
                        Encrypted    = $Device.isEncrypted
                        Registration = $Device.deviceRegistrationState
                        Enrollment   = $Device.deviceEnrollmentType
                        AzureADDevID = $Device.azureADDeviceId
                        AutoPilot    = $Device.autopilotEnrolled
                        EthernetMAC  = $Device.ethernetMacAddress
                        WiFiMAC      = $Device.WiFiMacAddress
                        MemoryGB     = $mem
                        DiskSizeGB   = $disksize
                        FreeSpaceGB  = $freespace
                        SerialNumber = $Device.serialNumber 
                        OSName       = $Device.operatingSystem 
                        OSVersion    = $Device.osVersion
                        Ownership    = $Device.ownerType
                        Category     = $Device.deviceCategoryDisplayName
                        EnrollDate   = $Device.enrolledDateTime
                        ManagedBy    = $Device.managementAgent
                        LastSyncTime = $LastSync
                        LastSyncDays = $SyncDays
                        Compliant    = $compliant
                        Apps         = $DetectedApps
                    }    
                }
                'Raw' {
                    $Device
                }
            } # switch
            $dx++
        } # foreach
    }
    catch {
        Write-Warning "Queried $dx of $dcount Intune devices before encountering an error"
        Write-Error $_.Exception.Message 
    }
}