Configuring and running the Intune data provider
Setting up the configuration
To configure the data provider:
- In the Administration application go to Integration > Data Providers and open the Intune data provider for editing.
- Edit the default configuration from the Configurations grid.
- On the General page:
- Make sure the Enabled checkbox is selected.
- Select the Microsoft Entra ID (Intune) service connection in the Service Connection field.
- Default value for Data Collector Workflow is Intune Integration - Data Collector.
The Account and Password fields should be left empty. They are irrelevant for this data provider.
- Configure the Settings page:
- If the Create new computers checkbox is selected, you can choose the organizational unit to which newly imported computers will be assigned as well as select the status and management type for them.
- Select the Prevent device name from updating checkbox if you wish that names of certain devices must not be updated by each import. If the checkbox is selected, you must specify an ASQL expression that will filter devices whose names need to remain unchanged. The ASQL expression field is automatically validated.
- If the Change status for deleted computers checkbox is selected, you can use the corresponding dropdown field to set a preferred status to computers that have been deleted from the Intune endpoint manager.
- The Matching Keys grid specifies the matching rules for assets. By default the matching priority is as follows:
- 1 - SPSComputerClassIntuneIntegration.IntuneID;
- 2 - SPSAssetClassBase.SerialNumber;
- 3 - SPSAssetClassMobile.IMEI;
- 4 - SPSComputerClassBase.Name AND SPSComputerClassIntuneIntegration.TenantID;
- 5 - SPSComputerClassBase.Name.
You can add additional keys if necessary. Use the Priority field to set the sequence of matching where 1 is the highest priority. In the Expression field specify the attribute that should be used for matching. To set a matching key:
- Use the following format: "SPSComputerClassBase.Name". ASQL expressions are not supported.
- Use comma in an expression to combine several attributes with the AND operator.
The Custom Workflow Parameters grid is empty by default. However, you can use it if you want to adjust the default Intune workflows. You will need to create a parameter and then use it inside the workflow. For more information on custom workflow parameters, please refer to Sample data collector workflow for Generic Inventory extension.
Below you can find additional information on setting custom parameters.
- Save the configuration.
- Run the Enable and Activate actions for the data provider.
Custom workflow parameters
Several parameters are defined for the Intune data provider by default. If need be, you can add any of the following parameters to the grid and use it without editing the workflows:
- SkipImportOfApplicationInventory. Add this parameter with an empty value if you want the data provider to skip downloading the application inventory for devices.
- MaxAppInventoryRecords. The default value of 250.000 inventory records is imported at once. If you wish to speed up the import, you can set the value to 500.000. Whereas, if the data provider runs into a timeout, you can reduce this value. We do not recommend using this parameter unless it is absolutely necessary.
- DevicesFilter. If you add this parameter, the Intune data provider will filter imported devices based on the configured filter. The parameter value is a string type. Example: "operatingSystem eq 'Windows'." In this case, the Intune collector workflow will retrieve only devices that match this filter, e.g. devices with the Windows operating system.
To construct a query for the filter value, please refer to this article (external link). You can check your queries by trying them out in the Microsoft graph explorer (external link). Log in to the graph explorer by using an administrator account to your company's Microsoft Azure portal. To check your query, enter a value into the query field and click Run query. For example, you can enter:
https://graph.microsoft.com/v1.0/deviceManagement/managedDevices?$filter=operatingSystem eq 'Windows'
As a result, the API will return the list of devices with the Windows operating system.
Checking the import results
Click the configuration of the Intune data provider to open its preview.
The Last Result section of the preview shows if the import was successful or not. The preview also displays all jobs, workflow instances, and import logs for the selected configuration.
You can also review jobs, workflow instances, and import logs on the separate tabs of the configuration dialog.
After the successful execution of the data provider, you can also find XML files with imported data in the Matrix42 root folder under Messages/Data/IntuneIntegration/LastResult.