You can’t view app and policy error codes in Intune in the Azure portal

After migration from Intune classic portal to the Azure portal, you can’t see error codes in the Azure portal when a policy doesn’t work or an app can't be deployed on managed devices.

You can use Graph Explorer to view the error codes. To do this, follow these steps:

1. Sign in to Graph Explore by using the tenant admin account.

2. Add the following permissions:

   • DeviceManagementConfiguration.Read.All

   • DeviceManagementConfiguration.ReadWrite.All

   • DeviceManagementManagedDevices.Read.All

   • DeviceManagementManagedDevices.ReadWrite.All

3. Find the GUID of the policy that doesn’t work, for example, in https://portal.azure.com/#blade/Microsoft_Intune_DeviceSettings/ConfigurationMenu/overview/configurationId/d32ef914-c0f2-4b16-915a-25c553cdbc97/policyJourneyState/, the policy GUID is d32ef914-c0f2-4b16-915a-25c553cdbc97.

    

4. Copy the GUID of a device that has the policy assigned.

5. Enter the following in the URL bar, and then select Run Query. 
       https://graph.microsoft.com/beta/managedDevices/<Device_GUID>/deviceConfigurationStates/<Policy_GUID>/settingStates

6. Look for "errorCode" in the response, and then check Company resource access (common errors) for detailed information about the error code.