Connect Microsoft Intune

Imports managed device inventory from Microsoft Intune through Microsoft Graph.

For the general flow of adding a source, see Connect Data Sources.

Before you start

• Active Microsoft Entra ID tenant

• Active Intune license

• Azure account with Global Administrator or Application Administrator role

Step 1 — Create an App Registration

1. Azure portal → App registrations → New registration

2. Name: HARVEN-Intune, type: Single tenant

3. Note the Application (client) ID and Directory (tenant) ID

Step 2 — Configure Microsoft Graph permissions

API permissions → Add a permission → Microsoft Graph → Application permissions

• DeviceManagementManagedDevices.Read.All — Read managed devices

• DeviceManagementConfiguration.Read.All — Read Intune configuration

⚠️ Click Grant admin consent.

Step 3 — Create a Client Secret

Certificates & secrets → New client secret → copy the value immediately.

What to enter in HARVEN

• Tenant ID — Your Azure AD tenant identifier (App Registration → Directory (tenant) ID)

• Client ID — Application identifier (App Registration → Application (client) ID)

• Client Secret — Created secret (Certificates & secrets → Value)

What HARVEN reads

• managed_devices — Intune managed devices: identification (device_id, device_name, serial_number), user (user_principal_name, user_display_name), system (operating_system, os_version), security (compliance_state, is_encrypted, is_jail_broken), management (last_sync_datetime, enrolled_datetime)

Official documentation

• Microsoft Graph Permissions

• Microsoft Intune Graph API overview

Need help? Contact [email protected].