# Devices

### Introduction

The Devices Reports section of Bsure Insights provides valuable insights into your organization's device ecosystem. The section revolves around devices registered with Microsoft Entra ID. 

An Entra ID device is a physical or virtual endpoint - such as laptops, desktops, mobile phones, or tablets - that is registered or joined to your Entra ID tenant. These devices can be user-owned (registered) or organization-owned (joined, either Microsoft Entra joined or Microsoft Entra hybrid joined), and may be managed through solutions like Microsoft Intune, enabling secure access to corporate resources and enforcement of IT policies.

Microsoft documentation: [What is a device identity?](https://learn.microsoft.com/en-us/entra/identity/devices/overview)

### Data Source

All device data in the reports are collected from the[ `/devices`](https://learn.microsoft.com/en-us/graph/api/resources/device) Microsoft Graph endpoint.

In Microsoft Entra, this data is found in the [All devices](https://entra.microsoft.com/#view/Microsoft_AAD_Devices/DevicesMenuBlade/~/Devices/menuId/Devices) view:

<figure><img src="https://content.gitbook.com/content/ygloFyyKhIYtV62dMZJc/blobs/bkmWcK8SFcI4KdC64QRQ/image.png" alt=""><figcaption><p>All devices in Microsoft Entra</p></figcaption></figure>

{% hint style="warning" %}
Currently, we do not collect data from Intune. \
Intune has its own Microsoft Graph endpoint, [`/deviceManagement`](https://learn.microsoft.com/en-us/graph/api/resources/intune-devices-manageddevice) \
In the future we will use this endpoint to add more information about managed devices.
{% endhint %}

### Properties&#x20;

The properties we collect, and the name we use in reports

<table><thead><tr><th width="143">Name in reports</th><th width="270">Property</th><th>Description</th></tr></thead><tbody><tr><td>Device Name</td><td>displayName</td><td>The display name for the device. </td></tr><tr><td>Owner</td><td>registeredOwners</td><td>The users or service principals that are registered as owners of the device. </td></tr><tr><td>Registered</td><td>registrationDateTime</td><td>Date and time of when the device was registered.</td></tr><tr><td>Last Seen</td><td>approximateLastSignInDateTime</td><td>The timestamp representing the last time the device signed in.</td></tr><tr><td>Days Not Seen</td><td></td><td>Calculated as the difference between the current date and the <code>approximateLastSignInDateTime</code>.</td></tr><tr><td>Join Type</td><td>trustType</td><td>Type of trust for the joined device. Possible values: Registered, Joined, Hybrid joined</td></tr><tr><td>OS</td><td>operatingSystem</td><td>The type of operating system on the device.</td></tr><tr><td>Version</td><td>operatingSystemVersion</td><td>The version of the operating system on the device.</td></tr><tr><td>Enabled</td><td>accountEnabled</td><td>True if the account is enabled; otherwise, false.</td></tr><tr><td>Enrollment Type</td><td>enrollmentType</td><td>Enrollment type of the device. Intune sets this property. Possible values are: unknown, userEnrollment, deviceEnrollmentManager, appleBulkWithUser, appleBulkWithoutUser, windowsAzureADJoin, windowsBulkUserless, windowsAutoEnrollment, windowsBulkAzureDomainJoin, windowsCoManagement, windowsAzureADJoinUsingDeviceAuth, appleUserEnrollment, appleUserEnrollmentWithServiceAccount. Note: This property might return other values apart from those listed.</td></tr><tr><td>Compliant</td><td>isCompliant</td><td>True if the device complies with Mobile Device Management (MDM) policies; otherwise, false.</td></tr><tr><td>Managed</td><td>isManaged</td><td>True if the device is managed by a Mobile Device Management (MDM) app; otherwise, false.</td></tr><tr><td>Ownership</td><td>deviceOwnership</td><td>Ownership of the device. Intune sets this property. Possible values are: unknown, company, personal.</td></tr><tr><td>Manufacturer</td><td>manufacturer</td><td>Manufacturer of the device.</td></tr><tr><td>Model</td><td>model</td><td>Model of the device.</td></tr><tr><td>MDM</td><td>managementType</td><td>The management channel of the device. This property is set by Intune. Possible values are: eas, mdm, easMdm, intuneClient, easIntuneClient, configurationManagerClient, configurationManagerClientMdm, configurationManagerClientMdmEas, unknown, jamf, googleCloudDevicePolicyController.</td></tr><tr><td>Enrollment Profile</td><td>enrollmentProfileName</td><td>Enrollment profile applied to the device. For example, Apple Device Enrollment Profile, Device enrollment - Corporate device identifiers, or Windows Autopilot profile name. This property is set by Intune.</td></tr><tr><td>Device Status</td><td></td><td>This is determined based on approximateLastSignInDateTime. A device is considered "Inactive" if it has not been seen 90 days.</td></tr><tr><td>Rooted</td><td>isRooted</td><td>True if the device is rooted or jail-broken; otherwise, false.</td></tr><tr><td>Windows Support</td><td></td><td>This is determined by comparing the operatingSystemVersion to Microsoft’s official Windows support lifecycle data. A device is marked as "Supported" or "Unsupported" based on whether its version is still within Microsoft’s support period.</td></tr><tr><td>Windows Release</td><td></td><td>This is extracted from the operatingSystemVersion to identify the specific Windows release for better categorization.</td></tr><tr><td>Windows Build</td><td></td><td>This is extracted from the operatingSystemVersion to display the specific build number of the Windows operating system</td></tr><tr><td>End of Life</td><td></td><td>This is determined by comparing the operatingSystemVersion to Microsoft’s end-of-life support dates. It indicates whether the device’s OS version has reached or passed its end-of-support date.</td></tr><tr><td>Windows Type</td><td></td><td>This is inferred from the operatingSystemVersion and other properties to categorize the Windows edition (e.g. Windows 10, Windows 11)</td></tr></tbody></table>