Use Graph to create settings catalog policies in your tenant without assignment or scope tags.
Then the name is _MSLearn_Example_CommonEDU – iPads – Appple IntelligenceA policy is created in the tenant.
POST
Content-Type: application/json
{“name”:”_MSLearn_Example_CommonEDU – iPads – Apple Intelligence”,”description”:””,”platforms”:”iOS“,”technologies”:”mdm,appleRemoteManagement”,”roleScopeTagIds”:[“0″],”settings”:[{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationSetting”,”settingInstance”:{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance”,”settingDefinitionId”:”com.apple.applicationaccess_com.apple.applicationaccess”,”groupSettingCollectionValue”:[{“children”:[{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance”,”settingDefinitionId”:”com.apple.applicationaccess_allowgenmoji”,”choiceSettingValue”:{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationChoiceSettingValue”,”value”:”com.apple.applicationaccess_allowgenmoji_false”,”children”:[]}},{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance”,”settingDefinitionId”:”com.apple.applicationaccess_allowimageplayground”,”choiceSettingValue”:{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationChoiceSettingValue”,”value”:”com.apple.applicationaccess_allowimageplayground_false”,”children”:[]}},{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance”,”settingDefinitionId”:”com.apple.applicationaccess_allowimagewand”,”choiceSettingValue”:{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationChoiceSettingValue”,”value”:”com.apple.applicationaccess_allowimagewand_false”,”children”:[]}},{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance”,”settingDefinitionId”:”com.apple.applicationaccess_allowpersonalizedhandwritingresults”,”choiceSettingValue”:{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationChoiceSettingValue”,”value”:”com.apple.applicationaccess_allowpersonalizedhandwritingresults_false”,”children”:[]}},{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance”,”settingDefinitionId”:”com.apple.applicationaccess_allowwritingtools”,”choiceSettingValue”:{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationChoiceSettingValue”,”value”:”com.apple.applicationaccess_allowwritingtools_false”,”children”:[]}}]}]}}]}
- Try it out Click to open Graph Explorer.
- To open Graph Explorer, select your user icon in the upper right to sign in, and sign in with your Intune administrator organizational account.
-
run query Click to create a policy in your tenant.
tip
If you are new to Graph Explorer, you may need to grant tenant access to your application or modify existing permissions. In this graph call: DeviceManagementConfiguration.ReadWrite.All Permission is required. Select Modify Permissions, then agreementYou can grant the required permissions by selecting there is.
- Policies are created in your tenant and can be edited to meet your requirements before being assigned to groups.