Auto Approve Driver Updates Scheduled

Auto-approve new driver updates in Intune driver update policies

Description

This scheduled runbook automatically approves pending driver updates in one or more Intune driver update policies. It can filter driver updates by display name pattern, driver class, or manufacturer. Optional email notifications can be sent after approval operations complete. The notification email includes CSV and/or Excel (xlsx) report files listing every driver approval action (policy, driver, version, manufacturer, driver class, release date and outcome). The report files can also be uploaded to an Azure Storage Account, returning time-limited download links. The ReportFileFormat parameter controls which file formats are generated and delivered (CSV only, CSV & XLSX, or XLSX only). When the CSV attachment exceeds the email size limit and "CSV & XLSX" is selected, the email falls back to the Excel workbook alone.

Setup regarding email sending

Sending an email report is optional and only happens when a recipient (EmailTo) is provided. The sender address is taken from the RJReport.EmailSender tenant setting.

This runbook sends emails using the Microsoft Graph API. To send emails via Graph API, you need to configure an existing email address in the runbook customization.

See the RealmJoin Report Settings documentation for details.

Location

Organization → Devices → Auto Approve Driver Updates (Scheduled)

Full Runbook name

rjgit-org_devices_auto-approve-driver-updates_scheduled

Permissions

Application permissions

• Type: Microsoft Graph

  • DeviceManagementConfiguration.ReadWrite.All
  • Mail.Send
  • Organization.Read.All

Parameters

PolicyNames

(Optional) Comma-separated list of driver update policy names to scope the approval (e.g., "Policy1, Policy2, Policy3"). If not specified, all policies are processed.

Property	Value
Required	false
Default Value
Type	String

PolicyIds

(Optional) Comma-separated list of driver update policy IDs to scope the approval (e.g., "id1, id2, id3"). If not specified, all policies are processed.

Property	Value
Required	false
Default Value
Type	String

DriverDisplayNamePattern

(Optional) Filter driver updates by display name pattern (supports wildcards). Only matching drivers will be approved.

Property	Value
Required	false
Default Value
Type	String

DriverClass

(Optional) Filter by driver class IDs (comma-separated). Example: "Bluetooth,Networking,Firmware" for specific driver classes.

Property	Value
Required	false
Default Value
Type	String

DriverManufacturer

(Optional) Filter by driver manufacturer name. Only drivers from the specified manufacturer will be approved.

Property	Value
Required	false
Default Value
Type	String

MaximumDriverAge

(Optional) Maximum age in days for drivers to be approved. Only drivers released within the last X days will be approved. Example: 30 to only approve drivers released in the last 30 days.

Property	Value
Required	false
Default Value	0
Type	Int32

OnlyNeedsReview

When enabled (default), only drivers with status "needsReview" are approved. Drivers with status "suspended" or "declined" are skipped. Disable to also re-approve suspended or declined drivers.

Property	Value
Required	false
Default Value	True
Type	Boolean

WhatIf

(Optional) When enabled, simulates driver approvals without making actual changes. Shows which drivers would be approved and sends a report to EmailTo if configured.

Property	Value
Required	false
Default Value	False
Type	SwitchParameter

ReportFileFormat

Controls which report file formats are generated and delivered: "CSV only", "CSV & XLSX" (default) or "XLSX only".

Property	Value
Required	false
Default Value	CSV & XLSX
Type	String

CreateDownloadLink

If enabled, the report files are uploaded to an Azure Storage Account and time-limited download links are returned. Disabled by default.

Property	Value
Required	false
Default Value	False
Type	Boolean

ContainerName

Storage container name used for the upload. Configured per runbook (not a global RJReport setting).

Property	Value
Required	false
Default Value	auto-approve-driver-updates
Type	String

ResourceGroupName

Resource group that contains the storage account. Sourced from the RJReport tenant settings.

Property	Value
Required	false
Default Value
Type	String

StorageAccountName

Storage account name used for the upload. Sourced from the RJReport tenant settings.

Property	Value
Required	false
Default Value
Type	String

LinkExpiryDays

Number of days until the generated download link expires. Sourced from the RJReport tenant settings.

Property	Value
Required	false
Default Value	6
Type	Int32

EmailFrom

Sender email address for notifications. This parameter is backed by a setting and should not be modified directly.

Property	Value
Required	false
Default Value
Type	String

EmailTo

(Optional) Recipient email address for approval notifications. If not specified, no email is sent.

Property	Value
Required	false
Default Value
Type	String

Back to Runbook Reference overview