Use Graph to create the settings catalog policy in your tenant without assignments or scope tags.
This creates a policy in your tenant with the name _MSLearn_Example_CommonEDU – iPads – Appple Intelligence.
POST
Content-Type: application/json
{“name”:”_MSLearn_Example_CommonEDU – iPads – Apple Intelligence“,”description”:””,”platforms”:”iOS”,”technologies”:”mdm,appleRemoteManagement”,”roleScopeTagIds”:[“0″],”settings”:[{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationSetting”,”settingInstance”:{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance”,”settingDefinitionId”:”com.apple.applicationaccess_com.apple.applicationaccess”,”groupSettingCollectionValue”:[{“children”:[{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance”,”settingDefinitionId”:”com.apple.applicationaccess_allowgenmoji”,”choiceSettingValue”:{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationChoiceSettingValue”,”value”:”com.apple.applicationaccess_allowgenmoji_false”,”children”:[]}},{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance”,”settingDefinitionId”:”com.apple.applicationaccess_allowimageplayground”,”choiceSettingValue”:{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationChoiceSettingValue”,”value”:”com.apple.applicationaccess_allowimageplayground_false”,”children”:[]}},{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance”,”settingDefinitionId”:”com.apple.applicationaccess_allowimagewand”,”choiceSettingValue”:{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationChoiceSettingValue”,”value”:”com.apple.applicationaccess_allowimagewand_false”,”children”:[]}},{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance”,”settingDefinitionId”:”com.apple.applicationaccess_allowpersonalizedhandwritingresults”,”choiceSettingValue”:{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationChoiceSettingValue”,”value”:”com.apple.applicationaccess_allowpersonalizedhandwritingresults_false”,”children”:[]}},{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance”,”settingDefinitionId”:”com.apple.applicationaccess_allowwritingtools”,”choiceSettingValue”:{“@odata.type”:”#microsoft.graph.deviceManagementConfigurationChoiceSettingValue”,”value”:”com.apple.applicationaccess_allowwritingtools_false”,”children”:[]}}]}]}}]}
- Click on To try to open Graph Explorer.
- Once Graph Explorer is open, select the icon icon at the top right to sign in and sign in with your Intune admin organizational account.
- Click on Run query to create the policy in your tenant.
Advice
If you’re using Graph Explorer for the first time, you may need to grant the app access to your tenant or change existing permissions. This graph call requires permissions DeviceManagementConfiguration.ReadWrite.All . You can grant the required permissions by selecting Change permissions then selecting Consent.
- The policy is created in your tenant and can be edited to meet your needs before assigning it to groups.