Skip to main content

Microsoft Intune - User Guide

In this article, you will understand step by step how to easily integrate with Microsoft Intune

Microsoft Intune is Microsoft's cloud-based endpoint management service that controls how organizational devices are used and enforces compliance, configuration, and security policies across enrolled devices.

Required Permissions

  • read: DeviceManagementManagedDevices.Read.All

  • read: DeviceManagementConfiguration.Read.All

  • read: User.Read.All

  • read: Organization.Read.All

Scytale follows the least-privilege principle, limiting permission scopes strictly to what's required for reliable audit evidence collection.

How to Connect

  1. In Scytale, go to 'Integrations'.

  2. Search for Microsoft Intune and select 'Connect'.

  3. Paste your directory (tenant) ID, application (client) ID & client secret value.

  4. Add a connection name — this will be used to differentiate between your connections — and then select 'Connect'.

You have now successfully connected to Microsoft Intune.

How to Generate Credentials in Microsoft Intune

  1. Log in to the Azure portal and go to Microsoft Entra ID.

  2. In the left menu, select 'App registrations' and then 'New registration'.

  3. Enter a name for the application — for example, scytale-integration — set the supported account types to 'Accounts in this organizational directory only (Single tenant)', and then select 'Register'.

    Note: If you already registered an application for another Microsoft integration with Scytale, you can reuse it. Only the API permissions differ.

  4. On the application's 'Overview' page, copy the application (client) ID and the directory (tenant) ID.

  5. In the application, go to 'Certificates & secrets' and select 'New client secret'.

  6. Enter a description, set an expiry, and then select 'Add'.

  7. Copy the secret 'Value', not the 'Secret ID'.

    Note: The secret value is displayed only once. Be sure to copy it before leaving the page.

  8. Go to 'API permissions', select 'Add a permission', choose 'Microsoft Graph', and then select 'Application permissions'.

  9. Add the permissions listed under Required Permissions above.

  10. Select 'Grant admin consent for Default Directory'.

    Note: This is the key step — Graph application permissions do nothing until admin consent is granted.

    Screenshot_4

Related Articles
Did this answer your question?