Microsoft Intune

Microsoft Intune connects your MDM-managed device inventory into Navigator, including hardware specs and disk-encryption status that other Microsoft connectors don’t provide.

At a glance


Data provided	Devices
Authentication	OAuth2 client credentials (Azure app registration)
Where to configure	Connectors → Add a Connector → Microsoft Intune

Required permissions

Create (or reuse) an Azure app registration, then grant it this Microsoft Graph Application permission (not delegated) with admin consent:

Permission	Why it’s needed
`DeviceManagementManagedDevices.Read.All`	Read MDM-managed device records

Setup

In the Azure Portal, go to Entra ID → App registrations and create a new app registration (or reuse the one you set up for Entra ID/Defender).
Under API permissions, add the Microsoft Graph Application permission listed above, then click Grant admin consent.
Under Certificates & secrets, create a new client secret and copy its value immediately. It’s only shown once.
Note your Tenant ID, the app registration’s Client ID, and the client secret you just created.
In Navigator, go to Connectors → Add a Connector → Microsoft Intune.
Enter the Tenant ID, Client ID, and Client Secret.
Save. Navigator validates the credentials and enqueues a first sync immediately.

Vendor documentation

Microsoft’s own instructions: Register an application with the Microsoft identity platform for the app registration steps, and List managedDevices for the Graph API call this connector uses and the exact permission it requires.

What data this connector provides

Intune is the only connector today that reports:

Disk encryption status (isEncrypted)
Hardware specs: physical memory, total/free storage, all in real, confirmed bytes
Primary user: via userPrincipalName

Every Intune-managed device is treated as having agent-based management coverage.