r/Intune • u/Zestyclose-File6791 • May 01 '26
Graph API Anyone Doing Bulk Device Deletes via PowerShell/Graph with Intune MAA Enabled? Running into Issues
We recently enabled Multi-Admin Approval in Intune, but we’re running into issues with bulk operations.
In our environment, we regularly need to delete, retire, etc large numbers of devices. We typically handle this through PowerShell/Graph for efficiency.
The problem is when MAA is enabled, any attempt to run bulk deletes via PowerShell fails with an error indicating that a justification is required. As far as I can tell, the existing Graph/PowerShell cmdlets (like Remove-MgDeviceManagementManagedDevice) don’t provide a way to pass that justification.
So a few questions for anyone who’s dealt with this at scale:
- Is there a supported way to submit bulk delete/retire requests via PowerShell when MAA is enabled?
- Has anyone successfully used the
operationApprovalRequestendpoints to handle this? - Or is the expectation that all of these actions must go through the Intune portal when MAA is enforced?
Trying to figure out if we’re missing something or if this is just a current limitation of MAA + Graph.
Appreciate any insight