Hybrid Identity
Intune-managed and Entra-joined devices across hybrid environments.
What it does
Discovers Azure AD joined, Hybrid Azure AD joined, and Azure AD registered devices primarily via Microsoft Graph /devices (trustType) and enriches with Intune managedDevices compliance/encryption when available. Covers compliance state, encryption status, and management type for Days 1-30 device readiness assessment before migration begins. Migration-useful CSV enrichment (v1.1): - Stable ids: DeviceId, ObjectId, IntuneDeviceId, OwnerObjectId, UserId - Names: DeviceName, DisplayName, OwnerDisplayName, UserDisplayName - Relationships: Owner* (registeredOwners/registeredUsers), ManagerId → _ParentAnchorID - Timestamps (ISO UTC): CreatedDateTime, EnrollmentDate, LastSyncDateTime, LastActivityDate, OnPremisesLastSyncDateTime - Hybrid posture: TrustType/TrustTypeRaw, JoinType/JoinTypeRaw, CloudOnly, OnPremisesSyncEnabled, OnPremisesSecurityIdentifier, ProfileType, MdmAppId Honest EMPTY when tenant has no devices. Fail loud on AUTH.
How the app exposes it
The module feeds into the ACQI app's dedicated results view. From there, conflicts, dependencies, and readiness scores roll up into the deal workspace.
/discovered/hybrid-identity Outputs
Each module produces a CSV with readiness and risk scores, evidence-source counts, and last-seen timestamps. The exact columns vary by module — the app's results view shows the live schema.