IntuneAppProtectionPolicyAndroid only partially supports App Protection policies

[dannyKBjj]

Description of the issue

The module does not support a number of properties that get returned from Get-MgBetaDeviceAppManagementAndroidManagedAppProtection:

After looking at the module, it would appear that the following configuration properties are not supported.

AllowedAndroidDeviceManufacturers
AllowedAndroidDeviceModels
AllowedDataIngestionLocations
AllowedDataIngestionLocations
AllowedOutboundClipboardSharingExceptionLength
AppActionIfAccountIsClockedOut
AppActionIfAndroidDeviceManufacturerNotAllowed
AppActionIfAndroidDeviceModelNotAllowed
AppActionIfAndroidSafetyNetAppsVerificationFailed
AppActionIfAndroidSafetyNetDeviceAttestationFailed
AppActionIfDeviceComplianceRequired
AppActionIfDeviceLockNotSet
AppActionIfDevicePasscodeComplexityLessThanHigh
AppActionIfDevicePasscodeComplexityLessThanLow
AppActionIfDevicePasscodeComplexityLessThanMedium
AppActionIfMaximumPinRetriesExceeded
AppActionIfSamsungKnoxAttestationRequired
AppActionIfUnableToAuthenticateUser
ApprovedKeyboards
BiometricAuthenticationBlocked
BlockAfterCompanyPortalUpdateDeferralInDays
BlockDataIngestionIntoOrganizationDocuments
ConnectToVpnOnLaunch
CustomDialerAppDisplayName
CustomDialerAppPackageId
DeployedAppCount
DeploymentSummary
DeviceLockRequired
DialerRestrictionLevel
ExemptedAppPackages
FingerprintAndBiometricEnabled
GracePeriodToBlockAppsDuringOffClockHours
KeyboardsRestricted
MaximumAllowedDeviceThreatLevel
MaximumRequiredOSVersion
MaximumWarningOSVersion
MaximumWipeOSVersion
MessagingRedirectAppDisplayName
MessagingRedirectAppPackageId
MinimumRequiredCompanyPortalVersion
MinimumWarningCompanyPortalVersion
MinimumWipeAppVersion
MinimumWipeCompanyPortalVersion
MinimumWipeOSVersion
MinimumWipePatchVersion
MobileThreatDefensePartnerPriority
MobileThreatDefenseRemediationAction
NotificationRestriction
PinRequiredInsteadOfBiometricTimeout
PreviousPinBlockCount
ProtectedMessagingRedirectAppType
RequiredAndroidSafetyNetAppsVerificationType
RequiredAndroidSafetyNetDeviceAttestationType
RequiredAndroidSafetyNetEvaluationType
TargetedAppManagementLevels
WarnAfterCompanyPortalUpdateDeferralInDays
WipeAfterCompanyPortalUpdateDeferralInDays

To see an example, try setting an Android App Configuration policy and setting Approved Keyboards:

Then export the policy.
Neither ApprovedKeyboards, nor the KeyboardsRestricted properties will not be exported. If you delete and recreate the policy using DSC, those settings will be lost.

Microsoft 365 DSC Version

1.24.1211.1

Which workloads are affected

Intune

The DSC configuration

NA

Verbose logs showing the problem

NA

Environment Information + PowerShell Version