Ensuring devices meet organizational security and compliance policies
Graph API No method match route template - Intune Device Configuration
I am currently trying to configure a shorter schedule for a noncompliance action for Intune-registered devices that become compromised (root/jailbreak etc.). The minimum interval that can be configured through the Intune admin center is 0.25 days, and shorter values must be configured through the Graph API (https://learn.microsoft.com/en-us/intune/device-security/compliance/configure-noncompliance-actions#:~:text=The-,Schedule,-(days%20after%20noncompliance.
However, Graph API seems to be behaving differently for our tenant than is documented. While I can GET the device compliance policy just fine like documented (https://learn.microsoft.com/en-us/graph/api/intune-deviceconfig-devicecompliancepolicy-get?view=graph-rest-1.0), I am unable to read its scheduled actions from this endpoint (https://learn.microsoft.com/en-us/graph/api/intune-deviceconfig-devicecompliancescheduledactionforrule-list?view=graph-rest-1.0). I am using Graph Explorer v1.0 and it returns an HTTP 400 error (Bad request) that there is no route that matches the template:
{
"error": {
"code": "No method match route template",
"message": "No OData route exists that match template ~/singleton/navigation/key/navigation with http verb GET for request /DeviceConfiguration_2607/StatelessDeviceConfigurationFEService/deviceManagement/deviceCompliancePolicies('28818110-abfa-46cb-983f-79e7052dbb81')/scheduledActionsForRule.",
"innerError": {
"date": "2026-08-04T13:24:54",
"request-id": "614bdce0-d2f2-4435-9729-56e2df7af57d",
"client-request-id": "4cd37669-19cc-ee28-5834-80573d6ff61b"
}
}
}
But I can read the scheduled actions if I change the URL to
.../deviceManagement/deviceCompliancePolicies/28818110-abfa-46cb-983f-79e7052dbb81?$expand=scheduledActionsForRule($expand=scheduledActionConfigurations)
However, as this diverges from the documentation, I have no idea how to change the scheduled action properly. From this I also know the UUID of the scheduled action I want to change, but can't GET it either from the normal endpoint (https://learn.microsoft.com/en-us/graph/api/intune-deviceconfig-devicecompliancescheduledactionforrule-get?view=graph-rest-1.0).
I have granted the necessary permissions (DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All) to Graph Explorer and the user account I am signed in with has an active Intune P1 license.
Please advise on possible issues with the documented API requests and how to properly change the gracePeriodHours value of a scheduled action.