Intune Dashboards: troubleshoot "TooManyRequests" API error in large environments

In deployments with large numbers of Intune-enrolled devices and managed policies (more than 1000 managed policies, with more than 1000 devices managed by a single policy), Nerdio Manager may encounter the Graph API TooManyRequests error when fetching data for the Policy Reports (Endpoints > Policy Reports) and/or Performance Reports (Endpoints > Performance Reports) dashboards.

To mitigate these issues, in the 7.6 and 7.7 releases of Nerdio Manager we have introduced some additional app service settings and recommendations for configuration changes based on the size of the environment.

Policy Reports dashboard errors

To prevent TooManyRequests errors for the Policy Reports dashboard in large environments, we recommend that you modify the policy cache configuration.

To change the Intune policy cache configuration in large environments:

Increase the Advanced App Service configuration settingFeatures:IntuneCache:PolicyDeviceStatusCacheLifetimeMinutes from its default of 180 by half an hour (30 minutes) for every 150 policies over and above 1000 (or part thereof) managed in your tenant.

For example, if you have 1500 managed policies in your tenant, Features:IntuneCache:PolicyDeviceStatusCacheLifetimeMinutes should be set at 180 + (4 x 30) = 300.

Performance Reports dashboard errors

If the logs indicate that the Collect User Experience History task is returning TooManyRequests errors, we recommend that you modify the number of results returned per query and the query interval, by creating Advanced App Service settings with the following key-value pairs:

To change the number of results per query and the query interval for User Experience History:

1. Create the setting IntuneUxHistory:DeviceScoresPageSize with a value of 10000. (The default value is 999.)

2. Create the setting IntuneUxHistory:DataCollectionIntervalInMinutes with a value of 1440. (The default value is 720.)

Advanced Troubleshooting

If the above measures don't fix the issue, you can attempt the following additional measures under the supervision of a Nerdio customer support agent.

       Exclude persistently problematic policies (Policy Reports errors only)

If modifying Features:IntuneCache:PolicyDeviceStatusCacheLifetimeMinutes fails to resolve TooManyRequests errors, you can manually exclude any policies that may cause persistent processing errors.

To permanently exclude problematic policies:

1. In the Azure portal, add the app service settingFeatures:IntuneCache:PolicyDeviceStatusCacheIgnoreList to your Nerdio Manager application.

2. Add the Device Default Compliance policy ID "c0f4911a-7ce6-4804-8563-677a2665d379" to the app service setting value field.

   Important: The indicated quotation marks must be included in the string.

3. Add any further problematic policies as comma separated values in the following format:

   Important: These are examples only; don't add these exact policy IDs!

   "c0f4911a-7ce6-4804-8563-677a2665d379, b0f4911a-7ce6-4804-8563-677a2665d378"

4. Review the error report in the Nerdio Manager log to discover any additional problematic policy IDs, and repeat the step above to add them to the exclude list.

   Note: Nerdio Manager no longer attempts to refresh cached data for policies added to this list. Data for these policies are either not displayed in the dashboards or displayed data may be out-of-date.

       Increase the global timeout for Graph API calls (all errors)

Modifying the global timeout value for background API calls to Microsoft Graph provides a margin for error in very large environments where API calls may exceed those permitted by the platform.

To increase the global timeout value:

1. In the Azure portal, add the app service settingFeature:HttpOption:HttpClientTimeout:Graph:Background to your Nerdio Manager application.

2. If the Nerdio Support team advises you to do so after reviewing application logs, increase the value for this setting from the default of 120 to 300.