Data Provider IV: Intune API Permissions
Add Required API Permissions for Intune Device Actions
Endpoint devices which are imported from Microsoft Intune are displayed in UEM/SUEM endpoint device lists. In order to perform the supported device actions like refresh, reboot, wipe and autopilot reset extended API permissions are required compared to the ones configured when setting up the Intune Inventory Data Provider.
See the Intune Inventory Data Provider documentation for details on installation and configuration.
Adding API Permissions in Azure
If not already done configure the service connection and register an application in Azure as described in the documentation.
- Open the Azure portal and navigate to "App registrations".
- Select the registered app which is used to import Intune devcies.
- Select API Permissions in the navigation.
- Select Add a Permission
- Add "DeviceManagementManagedDevices.PrivilegedOperations.All" for "Application"
- Then run the Grant admin consent action.
- The changes can take some time to be propagated.
Next Steps
- Add your Silverback as Data Provider: Data Provider III: Silverback
- Configure the File Upload Service Extension
- Proceed with Getting Started Guide
- Proceed with Administrator Guide