Sử dụng Graph để tạo chính sách cấu hình tùy chọn trong môi trường của bạn mà không cần phân công hoặc cấu hình phạm vi.
Điều này sẽ tạo ra một chính sách trong môi trường của bạn với tên _MSLearn_Example_CommonEDU – iPads – Optional.
Bấm vào Try it để mở Graph Explorer.
Khi Graph Explorer mở, chọn biểu tượng người dùng ở góc trên bên phải để đăng nhập và đăng nhập bằng tài khoản tổ chức quản trị viên Intune của bạn.
Bấm chạy truy vấn để tạo chính sách trong môi trường của bạn.
Chính sách đã được tạo trong môi trường của bạn và có thể được chỉnh sửa để đáp ứng yêu cầu của bạn trước khi phân công cho các nhóm.
#MSLearn #Intune #GraphExplorer #ChinhSachCauHinh #CommonEDUiPadsOptional
Use Graph to create the settings catalog policy in your tenant without assignments or scope tags.
This will create a policy in your tenant with the name _MSLearn_Example_CommonEDU – iPads – Optional.
POST https://graph.microsoft.com/beta/deviceManagement/configurationPolicies
Content-Type: application/json
{"name":"_MSLearn_Example_CommonEDU - iPads - Optional","description":"","platforms":"iOS","technologies":"mdm,appleRemoteManagement","roleScopeTagIds":("0"),"settings":({"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":"@odata.type":"#microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance","settingDefinitionId":"settings_item_bluetooth","groupSettingCollectionValue":("children":("@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"settings_item_bluetooth_enabled","choiceSettingValue":"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"settings_item_bluetooth_enabled_true","children":()))},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":"@odata.type":"#microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance","settingDefinitionId":"settings_item_timezone","groupSettingCollectionValue":("children":("@odata.type":"#microsoft.graph.deviceManagementConfigurationSimpleSettingInstance","settingDefinitionId":"settings_item_timezone_timezone","simpleSettingValue":"@odata.type":"#microsoft.graph.deviceManagementConfigurationStringSettingValue","value":"America/Los_Angeles"))},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":"@odata.type":"#microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance","settingDefinitionId":"com.apple.applicationaccess_com.apple.applicationaccess","groupSettingCollectionValue":("children":("@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"com.apple.applicationaccess_allowbluetoothmodification","choiceSettingValue":"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"com.apple.applicationaccess_allowbluetoothmodification_false","children":(),"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"com.apple.applicationaccess_allowusbrestrictedmode","choiceSettingValue":"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"com.apple.applicationaccess_allowusbrestrictedmode_true","children":(),"@odata.type":"#microsoft.graph.deviceManagementConfigurationSimpleSettingCollectionInstance","settingDefinitionId":"com.apple.applicationaccess_blockedappbundleids","simpleSettingCollectionValue":("value":"com.apple.facetime","@odata.type":"#microsoft.graph.deviceManagementConfigurationStringSettingValue","value":"com.apple.findmy","@odata.type":"#microsoft.graph.deviceManagementConfigurationStringSettingValue","value":"com.apple.Home","@odata.type":"#microsoft.graph.deviceManagementConfigurationStringSettingValue","value":"com.apple.MobileStore","@odata.type":"#microsoft.graph.deviceManagementConfigurationStringSettingValue","value":"com.apple.MobileSMS","@odata.type":"#microsoft.graph.deviceManagementConfigurationStringSettingValue","value":"com.apple.Music","@odata.type":"#microsoft.graph.deviceManagementConfigurationStringSettingValue","value":"com.apple.podcasts","@odata.type":"#microsoft.graph.deviceManagementConfigurationStringSettingValue","value":"com.apple.stocks","@odata.type":"#microsoft.graph.deviceManagementConfigurationStringSettingValue","value":"com.apple.tv","@odata.type":"#microsoft.graph.deviceManagementConfigurationStringSettingValue","value":"com.apple.store.Jolly","@odata.type":"#microsoft.graph.deviceManagementConfigurationStringSettingValue","value":"com.apple.supportapp","@odata.type":"#microsoft.graph.deviceManagementConfigurationStringSettingValue"),"@odata.type":"#microsoft.graph.deviceManagementConfigurationSimpleSettingInstance","settingDefinitionId":"com.apple.applicationaccess_enforcedsoftwareupdatedelay","simpleSettingValue":"@odata.type":"#microsoft.graph.deviceManagementConfigurationIntegerSettingValue","value":30,"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"com.apple.applicationaccess_forceautomaticdateandtime","choiceSettingValue":"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"com.apple.applicationaccess_forceautomaticdateandtime_true","children":(),"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"com.apple.applicationaccess_forceclassroomautomaticallyjoinclasses","choiceSettingValue":"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"com.apple.applicationaccess_forceclassroomautomaticallyjoinclasses_true","children":(),"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"com.apple.applicationaccess_forceclassroomrequestpermissiontoleaveclasses","choiceSettingValue":"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"com.apple.applicationaccess_forceclassroomrequestpermissiontoleaveclasses_true","children":(),"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"com.apple.applicationaccess_forceclassroomunpromptedappanddevicelock","choiceSettingValue":"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"com.apple.applicationaccess_forceclassroomunpromptedappanddevicelock_true","children":(),"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"com.apple.applicationaccess_forceclassroomunpromptedscreenobservation","choiceSettingValue":"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"com.apple.applicationaccess_forceclassroomunpromptedscreenobservation_true","children":(),"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance","settingDefinitionId":"com.apple.applicationaccess_forcepreserveesimonerase","choiceSettingValue":"@odata.type":"#microsoft.graph.deviceManagementConfigurationChoiceSettingValue","value":"com.apple.applicationaccess_forcepreserveesimonerase_true","children":()))},{"@odata.type":"#microsoft.graph.deviceManagementConfigurationSetting","settingInstance":{"@odata.type":"#microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance","settingDefinitionId":"com.apple.shareddeviceconfiguration_com.apple.shareddeviceconfiguration","groupSettingCollectionValue":({"children":("@odata.type":"#microsoft.graph.deviceManagementConfigurationSimpleSettingInstance","settingDefinitionId":"com.apple.shareddeviceconfiguration_assettaginformation","simpleSettingValue":"@odata.type":"#microsoft.graph.deviceManagementConfigurationStringSettingValue","value":"devicename","@odata.type":"#microsoft.graph.deviceManagementConfigurationSimpleSettingInstance","settingDefinitionId":"com.apple.shareddeviceconfiguration_lockscreenfootnote","simpleSettingValue":"@odata.type":"#microsoft.graph.deviceManagementConfigurationStringSettingValue","value":"MSLearn_Example_CommonEDU")})}})}
- Click Try it to open Graph Explorer.
- Once Graph Explorer is open, select the
user icon in the top right to sign-in and sign in with your Intune administrator organizational account. - Click Run query to create the policy in your tenant.
Tip
If it’s the first time using Graph Explorer, you may need to authorize the application to access your tenant or to modify the existing permissions. This graph call requires DeviceManagementConfiguration.ReadWrite.All permissions. You can grant the required permissions by selecting modify permissions and then selecting Consent.
- The policy is created in your tenant and can be edited to meet your requirements before assigning to groups.