mdm_bridge is only supported for device-scoped commands (#38015)

- Clarify that `mdm_bridge` is only supported for device-scoped commands
- Also add example query
- Context:
https://github.com/fleetdm/fleet/issues/37905#issuecomment-3719060086
This commit is contained in:
Noah Talerman 2026-01-26 16:58:01 -05:00 committed by GitHub
parent 83624c0b57
commit 89fb977695
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 9 additions and 2 deletions

View file

@ -17218,7 +17218,8 @@
"platforms": [
"windows"
],
"description": "Allows querying MDM enrolled devices using \"get\" commands.",
"description": "Allows querying MDM enrolled devices using \"get\" commands. Currently, only supports commands that target the device scope. Head to the [Windows configuration profiles (CSPs) documentation](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-configuration-service-provider) to verify that the setting support the device scope.",
"examples": "Identify Macs that are DEP capable but have not been enrolled to MDM.\n\n```\nSELECT raw_mdm_command_output FROM mdm_bridge WHERE mdm_command_input = '<SyncBody><Get><CmdID>1</CmdID><Item><Target><LocURI>./Device/Vendor/MSFT/Policy/Result/System/AllowTelemetry</LocURI></Target></Item></Get></SyncBody>';\n```",
"columns": [
{
"name": "enrollment_status",

View file

@ -1,7 +1,13 @@
name: mdm_bridge
platforms:
- windows
description: Allows querying MDM enrolled devices using "get" commands.
description: Allows querying MDM enrolled devices using "get" commands. Currently, only supports commands that target the device scope. Head to the [Windows configuration profiles (CSPs) documentation](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-configuration-service-provider) to verify that the setting support the device scope.
examples: |-
Identify Macs that are DEP capable but have not been enrolled to MDM.
```
SELECT raw_mdm_command_output FROM mdm_bridge WHERE mdm_command_input = '<SyncBody><Get><CmdID>1</CmdID><Item><Target><LocURI>./Device/Vendor/MSFT/Policy/Result/System/AllowTelemetry</LocURI></Target></Item></Get></SyncBody>';
```
columns:
- name: enrollment_status
type: text