HybridIdentity
Intune/Entra hybrid identity device inventory.
What it does
Discovers Azure AD joined, Hybrid Azure AD joined, and Azure AD registered devices primarily via Microsoft Graph /devices (trustType) and enriches with Intune managedDevices compliance/encryption when available. Covers compliance state, encryption status, and management type for Days 1-30 device readiness assessment before migration begins. Migration-useful CSV enrichment (v1.1): - Stable ids: DeviceId, ObjectId, IntuneDeviceId, OwnerObjectId, UserId - Names: DeviceName, DisplayName, OwnerDisplayName, UserDisplayName - Relationships: Owner* (registeredOwners/registeredUsers), ManagerId → _ParentAnchorID - Timestamps (ISO UTC): CreatedDateTime, EnrollmentDate, LastSyncDateTime, LastActivityDate, OnPremisesLastSyncDateTime - Hybrid posture: TrustType/TrustTypeRaw, JoinType/JoinTypeRaw, CloudOnly, OnPremisesSyncEnabled, OnPremisesSecurityIdentifier, ProfileType, MdmAppId Honest EMPTY when tenant has no devices. Fail loud on AUTH.
How the app exposes it
The module runs through the ACQI discovery orchestrator and writes its rows into a dedicated results view. From there, conflicts, dependencies, and readiness scores feed the deal-wide consolidation layer.
/discovered/hybrid-identity Outputs
Each module emits a normalised CSV keyed by entity ID with readiness and risk scores, evidence-source counts, and last-seen timestamps. The exact column set varies by module — the app's results view shows the live schema.