Skip to main content

Microsoft Intune Connector

Microsoft Intune Use the Microsoft Intune component to manage users, devices, and applications.

Connections

OAuth 2.0

OAuth 2.0 Connectivity for Microsoft Intune

This connection uses OAuth 2.0, a common authentication mechanism for integrations. Read about how OAuth 2.0 works here.

InputCommentsDefault
Authorize URLThe OAuth 2.0 Authorization URL for Microsoft Intunehttps://login.microsoftonline.com/common/oauth2/v2.0/authorize
Token URLThe OAuth 2.0 Token URL for Microsoft Intunehttps://login.microsoftonline.com/common/oauth2/v2.0/token
ScopesMicrosoft Intune Scopes.DeviceManagementManagedDevices.PrivilegedOperations.All DeviceManagementApps.ReadWrite.All DeviceManagementManagedDevices.ReadWrite.All Group.ReadWrite.All Domain.ReadWrite.All User.ReadWrite.All Directory.ReadWrite.All AuditLog.Read.All DeviceManagementConfiguration.ReadWrite.All offline_access
Client IDGet this value from your App Registration in the Azure Portal
Client SecretGet this value from your App Registration in the Azure Portal

OAuth 2.0 (Client Credentials)

OAuth 2.0 Client Credentials Connectivity for Microsoft Intune

This connection uses OAuth 2.0, a common authentication mechanism for integrations. Read about how OAuth 2.0 works here.

InputCommentsDefault
Token URLThe OAuth 2.0 Token URL for Microsoft Intunehttps://login.microsoftonline.com/<YOUR_TENANT_ID>/oauth2/v2.0/token
ScopesMicrosoft Intune Scopes.https://graph.microsoft.com/.default
Client IDGet this value from your App Registration in the Azure Portal
Client SecretGet this value from your App Registration in the Azure Portal

Triggers

Resource Trigger

Get notified to this flow when the specified resource changes.

InputCommentsDefault
Expiration Date TimeSpecifies the date and time when the webhook subscription expires. The time is in UTC, and can be an amount of time from subscription creation that varies for the resource subscribed to.
Change TypeIndicates the type of change in the subscribed resource that raises a change notification.
ResourceThe resource that will be monitored for changes. See https://learn.microsoft.com/en-us/graph/api/resources/change-notifications-api-overview?view=graph-rest-1.0
Connection

Actions

Add Group Members

Add a member to a security or Microsoft 365 group.

InputCommentsDefault
Connection
Group IdThe unique identifier of a MS365 or Security group.
Member IdsThe unique identifiers of members.

Assign Device Compliance Policy

Assign a device compliance policy by ID.

InputCommentsDefault
Connection
Device Compliance Policy IdUnique Identifier for the device to assign the compliance policy.
Assign IdKey of the entity.
TargetThe device compliance policy assignment target
Collection IdUnique Identifier for the target collection.

Assign Mobile App

Assign a mobile app to a group.

InputCommentsDefault
Connection
Mobile App IdUnique Identifier for the mobile app to assign.
Group IdThe unique identifier of the group that you want to assign the app to.
IntentThe intent of the assignment for the managed app. A 'Required' option will force the app to be installed on the device. An 'Available' option will make the app available for the user to install. An 'Uninstall' option will remove the app from the device. An 'Available Without Enrollment' option will make the app available for the user to install without enrolling the device.
TargetThe mobile app assignment target
SettingsThe mobile app assignment settings

Create Group

Create a group.

InputCommentsDefault
Connection
Display NameThe name to display in the address book for the group.
Mail NicknameThe mail alias for the group, unique for Microsoft 365 groups in the organization.
Security EnabledSpecifies whether the group is a security group.false
Mail EnabledSet to true for mail-enabled groups.false
DescriptionA description for the group.
Assigned LabelsThe list of sensitivity label pairs (label ID, label name) associated with a group
VisibilityThe display name for the group
Body FieldsExtra fields to include in the request body.

Create Managed App

Create a new App object.

InputCommentsDefault
Connection
OData App TypeThe type of app to create. This depends on the platform of the app. Check the Microsoft Graph API documentation for the correct type. Documentation for an Office Suite app can be found here https://learn.microsoft.com/en-us/graph/api/intune-apps-officesuiteapp-create?view=graph-rest-beta
Display NameAdd a name for the app. This name will be visible in the Intune apps list and to users in the Company Portal.​
DescriptionHelp your device users understand what the app is and/or what they can do in the app. This comments will be visible to them in Company Portal.
PublisherThe name of the developer or company that distributes the app. This information will be visible to users in Company Portal.
Icon Image TypeThe type of the Icon image. This field is required if the Icon Image Data is provided.
Icon Image DataThe base64 encoded image data for the Icon image. This field is required if the Icon Image Type is provided.
Is FeaturedShow this as a featured app in the Company Portal. Featured apps are prominently placed in Company Portal so that users can quickly get to them.false
Privacy Information URLProvide a link for people who want to learn more about the app's privacy settings and terms. The privacy URL will be visible to users in Company Portal.
Information URLLink people to a website or documentation that has more information about the app. The information URL will be visible to users in Company Portal.
OwnerThe name of the person in your organization who manages licensing or is the point-of-contact for this app. This name will be visible to people signed in to the admin center.​
DeveloperThe name of the company or Individual that developed the app. This information will be visible to people signed into the admin center.
NotesAdd additional notes about the app. Notes will be visible to people signed in to the admin center.
Specific Platform PropertiesThe specific properties for the app to be created, generic properties like '@odata.type', 'displayName', 'description', etc. are alredy covered by the other inputs. This input should be a JSON object with the specific properties for the app to be created. Check the Microsoft Graph API documentation for the correct properties for the app type you are creating. Documentation for an Office Suite app can be found here https://learn.microsoft.com/en-us/graph/api/intune-apps-officesuiteapp-create?view=graph-rest-beta

Create Mobile App Assignment

Create a mobile app assignment.

InputCommentsDefault
Connection
Mobile App IdThe ID of the mobile app to create the assignment for.
IntentThe intent of the assignment for the managed app. A 'Required' option will force the app to be installed on the device. An 'Available' option will make the app available for the user to install. An 'Uninstall' option will remove the app from the device. An 'Available Without Enrollment' option will make the app available for the user to install without enrolling the device.
TargetThe mobile app assignment target
SettingsThe mobile app assignment settings

Create Subscription

Create a subscription.

InputCommentsDefault
Connection
Change TypeIndicates the type of change in the subscribed resource that raises a change notification.
Notification URLThe URL to send notifications to.
ResourceThe resource that will be monitored for changes. See https://learn.microsoft.com/en-us/graph/api/resources/change-notifications-api-overview?view=graph-rest-1.0
Expiration Date TimeSpecifies the date and time when the webhook subscription expires. The time is in UTC, and can be an amount of time from subscription creation that varies for the resource subscribed to.
Lifecycle Notification URLRequired for Teams resources if the expirationDateTime value is more than 1 hour from now; optional otherwise. The URL of the endpoint that receives lifecycle notifications, including subscriptionRemoved, reauthorizationRequired, and missed notifications.
Body FieldsExtra fields to include in the request body.

Create User

Create a new user.

InputCommentsDefault
Connection
Account EnabledIndicates if the account is enabled.true
Display NameThe display name of the user.
Force Change Password Next Sign InIndicates if the user is forced to change their password on next sign in.true
PasswordThe password of the user.
User Principal NameThe user principal name of the user.
DomainThe domain for the user, this must be an existing domain in the tenant, you can list them using the 'List Domains' action.
Additional PropertiesAdditional properties that are not covered by the other inputs. This should be a JSON object and will be merged with the other inputs. You can get additional properties from the Microsoft Graph API documentation https://learn.microsoft.com/en-us/graph/api/resources/user?view=graph-rest-1.0#json-representation

Delete Group

Delete a single group.

InputCommentsDefault
Connection
Group IdThe ID of the group delete.

Delete Group Member

Delete a member from a security or Microsoft 365 group.

InputCommentsDefault
Connection
Group IdThe unique identifier of the group that you want to assign the app to.
Member IdThe unique identifier of a member.

Delete Managed App

Deletes an App.

InputCommentsDefault
Connection
Mobile App IDThe ID of the app to delete.

Delete Managed Device

Deletes a Managed Device.

InputCommentsDefault
Connection
Managed Device IdUnique Identifier for the device to delete.

Delete Mobile App Assignment

Delete a single mobile app assignment.

InputCommentsDefault
Connection
Mobile App IdThe ID of the mobile app to delete the assignment from.
Mobile App Assignment IdThe ID of the mobile app assignment to delete.

Delete Subscription by Id

Delete a single subscription by its ID.

InputCommentsDefault
Connection
Subscription IDThe ID of the subscription to delete.

Delete Subscriptions from an Endpoint

Delete all subscriptions from an endpoint.

InputCommentsDefault
Connection
Notification URLThe URL from which to delete all subscriptions.

Delete User

Deletes a User.

InputCommentsDefault
Connection
User IdUnique Identifier for the user to delete. This can be the user's id or userPrincipalName.

Get Detected App

Read properties and relationships of the Detected Apps object.

InputCommentsDefault
Connection
Detected App IdUnique Identifier for the detected app to retrieve.

Get Device Compliance Policy

Get a device compliance policy by ID.

InputCommentsDefault
Connection
Device Compliance Policy IdUnique Identifier for the device compliance policy to retrieve.

Get Device Compliance Policy Setting State Summary

Retrieve a device compliance policy setting state summary by its ID.

InputCommentsDefault
Connection
Device Compliance Policy Setting State Summary IdUnique Identifier for the device compliance policy setting state summary to retrieve.

Get Device Configuration

Get the device configurations.

InputCommentsDefault
Connection
Device Configuration IdUnique Identifier for the device to retrieve.

Get Directory Audit

Get a specific Microsoft Entra audit log item.

InputCommentsDefault
Connection
Microsoft Entra IdThe unique identifier for the Microsoft Entra audit log item to retrieve.

Get Group

Retrieve a single group.

InputCommentsDefault
Connection
Group IdThe ID of the group retrieve.

Get Managed App

Read properties and relationships of an App object.

InputCommentsDefault
Connection
App IdThe unique identifier of a managed app. You can get this from the 'List Managed Apps' action.

Get Managed Device

Read properties and relationships of the Managed Device object.

InputCommentsDefault
Connection
Managed Device IdUnique Identifier for the device to retrieve.

Get Mobile App

Retrieve a single mobile app.

InputCommentsDefault
Connection
Mobile App IdUnique Identifier for the mobile app to get.

Get Mobile App Assignment

Retrieve a single mobile app assignment.

InputCommentsDefault
Connection
Mobile App IdUnique Identifier for the mobile app to get.
Mobile App Assignment IdUnique Identifier for the mobile app assignment to get.

Get Subscription

Retrieve a single subscription.

InputCommentsDefault
Connection
Subscription IDThe ID of the subscription to retrieve.

Get User

Read properties and relationships of the User object.

InputCommentsDefault
Connection
User IdUnique Identifier for the user to get. This can be the user's id or userPrincipalName.
SelectFilters properties (columns).

List Detected Apps

List properties and relationships of the Detected Apps objects.

InputCommentsDefault
Connection
FilterFilters results (rows).
SelectFilters properties (columns).
ExpandRetrieves related resources.
Order ByOrders results.
TopSets the page size of results.
SkipIndexes into a result set. Also used by some APIs to implement paging and can be used together with $top to manually page results.
CountRetrieves the total count of matching resources.false
SearchReturns results based on search criteria.
FormatReturns the results in the specified media format.
Skip TokenRetrieves the next page of results from result sets that span multiple pages.

List Device Compliance Policies

List all device compliance policies.

InputCommentsDefault
Connection

List Device Compliance Policy Setting State Summaries

Retrieve a list of device compliance policy setting state summaries.

InputCommentsDefault
Connection

List Device Configurations

List all device configurations.

InputCommentsDefault
Connection

List Directory Audits

Retrieve a list of directory audits.

InputCommentsDefault
Connection
Fetch AllSet to true to retrieve all results.false
FilterFilters results (rows).
Order ByOrders results.
TopSets the page size of results.
Skip TokenRetrieves the next page of results from result sets that span multiple pages.

List Domains

Retrieve a list of domain objects.

InputCommentsDefault
Connection
FilterFilters results (rows).
SelectFilters properties (columns).
ExpandRetrieves related resources.
Order ByOrders results.
TopSets the page size of results.
SkipIndexes into a result set. Also used by some APIs to implement paging and can be used together with $top to manually page results.
CountRetrieves the total count of matching resources.false
SearchReturns results based on search criteria.
FormatReturns the results in the specified media format.
Skip TokenRetrieves the next page of results from result sets that span multiple pages.

List Group Members

List all members of a security or Microsoft 365 group.

InputCommentsDefault
Connection
Group IdThe unique identifier of a MS365 or Security group.
FilterFilters results (rows).
CountRetrieves the total count of matching resources.false
SelectFilters properties (columns).
SearchReturns results based on search criteria.
TopSets the page size of results.
ExpandRetrieves related resources.

List Groups

List all groups.

InputCommentsDefault
Connection
Fetch AllSet to true to retrieve all results.false
CountRetrieves the total count of matching resources.false
ExpandRetrieves related resources.
FilterFilters results (rows).
Order ByOrders results.
SearchReturns results based on search criteria.
SelectFilters properties (columns).
TopSets the page size of results.

List Managed Apps

List all managed apps in Intune.

InputCommentsDefault
Connection
FilterFilters results (rows).(microsoft.graph.managedApp/appAvailability eq null or microsoft.graph.managedApp/appAvailability eq 'lineOfBusiness' or isAssigned eq true)
SelectFilters properties (columns).
ExpandRetrieves related resources.
Order ByOrders results.
TopSets the page size of results.
SkipIndexes into a result set. Also used by some APIs to implement paging and can be used together with $top to manually page results.
CountRetrieves the total count of matching resources.false
SearchReturns results based on search criteria.
FormatReturns the results in the specified media format.
Skip TokenRetrieves the next page of results from result sets that span multiple pages.

List Managed Devices

List properties and relationships of the Managed Device objects.

InputCommentsDefault
Connection
FilterFilters results (rows).
SelectFilters properties (columns).
ExpandRetrieves related resources.
Order ByOrders results.
TopSets the page size of results.
SkipIndexes into a result set. Also used by some APIs to implement paging and can be used together with $top to manually page results.
CountRetrieves the total count of matching resources.false
SearchReturns results based on search criteria.
FormatReturns the results in the specified media format.
Skip TokenRetrieves the next page of results from result sets that span multiple pages.

List Mobile App Assignments

List all assignments for a mobile app.

InputCommentsDefault
Connection
Mobile App IdUnique Identifier for the mobile app to get.
Fetch AllSet to true to retrieve all results.false
FilterFilters results (rows).
SelectFilters properties (columns).
ExpandRetrieves related resources.
Order ByOrders results.
TopSets the page size of results.
SkipIndexes into a result set. Also used by some APIs to implement paging and can be used together with $top to manually page results.
CountRetrieves the total count of matching resources.false
SearchReturns results based on search criteria.
FormatReturns the results in the specified media format.
Skip TokenRetrieves the next page of results from result sets that span multiple pages.

List Mobile Apps

Retrieve a list of mobile apps.

InputCommentsDefault
Connection
Fetch AllSet to true to retrieve all results.false
FilterFilters results (rows).
SelectFilters properties (columns).
ExpandRetrieves related resources.
Order ByOrders results.
TopSets the page size of results.
SkipIndexes into a result set. Also used by some APIs to implement paging and can be used together with $top to manually page results.
CountRetrieves the total count of matching resources.false
SearchReturns results based on search criteria.
FormatReturns the results in the specified media format.
Skip TokenRetrieves the next page of results from result sets that span multiple pages.

List Software Update Status Summary

List the status summary of a software update.

InputCommentsDefault
Connection
Fetch AllSet to true to retrieve all results.false
SelectFilters properties (columns).
ExpandRetrieves related resources.
SearchReturns results based on search criteria.
FormatReturns the results in the specified media format.
Skip TokenRetrieves the next page of results from result sets that span multiple pages.

List Subscriptions

List all Subscriptions.

InputCommentsDefault
Connection
Fetch AllSet to true to retrieve all results.false
Skip TokenRetrieves the next page of results from result sets that span multiple pages.

List Users

Retrieve a list of user objects.

InputCommentsDefault
Connection
FilterFilters results (rows).
SelectFilters properties (columns).
ExpandRetrieves related resources.
Order ByOrders results.
TopSets the page size of results.
SkipIndexes into a result set. Also used by some APIs to implement paging and can be used together with $top to manually page results.
CountRetrieves the total count of matching resources.false
SearchReturns results based on search criteria.
FormatReturns the results in the specified media format.
Skip TokenRetrieves the next page of results from result sets that span multiple pages.

Raw Request

Send raw HTTP request to Microsoft Intune API

InputCommentsDefault
Connection
API VersionThe version of the API to use.
URLInput the path only (/deviceManagement/detectedApps), The base URL is already included (https://graph.microsoft.com/v1.0). For example, to connect to https://graph.microsoft.com/v1.0/deviceManagement/detectedApps, only /deviceManagement/detectedApps is entered in this field. e.g. /deviceManagement/detectedApps
MethodThe HTTP method to use.
DataThe HTTP body payload to send to the URL.
Form DataThe Form Data to be sent as a multipart form upload.
File DataFile Data to be sent as a multipart form upload.
File Data File NamesFile names to apply to the file data inputs. Keys must match the file data keys above.
Query ParameterA list of query parameters to send with the request. This is the portion at the end of the URL similar to ?key1=value1&key2=value2.
HeaderA list of headers to send with the request.
Response TypeThe type of data you expect in the response. You can request json, text, or binary data.json
TimeoutThe maximum time that a client will await a response to its request
Debug RequestEnable this to log the request and responsefalse
Retry Delay (ms)The delay in milliseconds between retries. This is used when 'Use Exponential Backoff' is disabled.0
Retry On All ErrorsIf true, retries on all erroneous responses regardless of type. This is helpful when retrying after HTTP 429 or other 3xx or 4xx errors. Otherwise, only retries on HTTP 5xx and network errors.false
Max Retry CountThe maximum number of retries to attempt. Specify 0 for no retries.0
Use Exponential BackoffSpecifies whether to use a pre-defined exponential backoff strategy for retries. When enabled, 'Retry Delay (ms)' is ignored.false

Reprocess User License Assignment

Reprocess all group-based license assignments for the user.

InputCommentsDefault
Connection
User IdUnique Identifier for the user to reprocess the license assignment. This can be the user's id or userPrincipalName.

Retire Managed Device

Retire a device from Intune management upon employee offboarding.

InputCommentsDefault
Connection
Managed Device IdUnique Identifier for the device to retire.

Update Group

Update a single group.

InputCommentsDefault
Connection
Group IdThe ID of the group update.
Display NameThe name to display in the address book for the group.
Mail NicknameThe mail alias for the group, unique for Microsoft 365 groups in the organization.
Security EnabledSet to true for mail-enabled groups. If Not Set the input will not be included in the request.
DescriptionA description for the group.
Assigned LabelsThe list of sensitivity label pairs (label ID, label name) associated with a group
VisibilityThe display name for the group
Body FieldsExtra fields to include in the request body.

Update Managed App

Update an App object.

InputCommentsDefault
Connection
Mobile App IDThe ID of the app to update.
OData App TypeThe type of app to update. This depends on the platform of the app. Check the Microsoft Graph API documentation for the correct type. Documentation for an Office Suite app can be found here https://learn.microsoft.com/en-us/graph/api/intune-apps-officesuiteapp-update?view=graph-rest-beta
Display NameUpdate the name for the app. This name will be visible in the Intune apps list and to users in the Company Portal.​
DescriptionUpdate the description to help your device users understand what the app is and/or what they can do in the app. This comments will be visible to them in Company Portal.
PublisherUpdate the name of the developer or company that distributes the app. This information will be visible to users in Company Portal.
Icon Image TypeUpdate the type of the Icon image. This field is required if the Icon Image Data is provided.
Icon Image DataUpdate the base64 encoded image data for the Icon image. This field is required if the Icon Image Type is provided.
Is FeaturedUpdate whether the app is featured. Featured apps are displayed prominently in the Company Portal.​false
Privacy Information URLUpdate the URL that links to the privacy information for the app. The privacy information URL will be visible to users in Company Portal.​
Information URLUpdate the URL that links to more information about the app. This URL will be visible to users in Company Portal.​
OwnerUpdate the name of the person or company that owns the app. This information will be visible to people signed into the admin center.​
DeveloperUpdate the developer of the app. This information will be visible to users in Company Portal.​
NotesUpdate any notes about the app. This information will be visible to people signed into the admin center.​
Specific Platform PropertiesThe specific properties for the app to be updated, generic properties like '@odata.type', 'displayName', 'description', etc. are alredy covered by the other inputs. This input should be a JSON object with the specific properties for the app to be updated. Check the Microsoft Graph API documentation for the correct properties for the app type you are updating. Documentation for an Office Suite app can be found here https://learn.microsoft.com/en-us/graph/api/intune-apps-officesuiteapp-update?view=graph-rest-beta

Update Managed Device

Update the properties of a Managed Device object.

InputCommentsDefault
Connection
Managed Device IdUnique Identifier for the device to update.
Managed Device NameUpdate the automatically generated name to identify a device.
NotesUpdated notes for the device. Intended to be used for additional information about the device.
Extra FieldsAdditional fields to update on the device. This is an object that can contain any additional fields that might not be covered by the other inputs.

Update Mobile App Assignment

Update a mobile app assignment.

InputCommentsDefault
Connection
Mobile App IdThe ID of the mobile app to update the assignment from.
Mobile App Assignment IdThe ID of the mobile app assignment to update.
IntentThe intent of the assignment for the managed app. A 'Required' option will force the app to be installed on the device. An 'Available' option will make the app available for the user to install. An 'Uninstall' option will remove the app from the device. An 'Available Without Enrollment' option will make the app available for the user to install without enrolling the device.
TargetThe mobile app assignment target
SettingsThe mobile app assignment settings

Update Software Update Status Summary

Update the status summary of a software update.

InputCommentsDefault
Connection
Display NameThe display name of the software update status summary.
Compliant Device CountThe number of devices that are compliant with the software update.
Non-Compliant Device CountThe number of devices that are not compliant with the software update.
Remediated Device CountThe number of devices that have been remediated.
Error Device CountThe number of devices that have an error with the software update.
Unknown Device CountThe number of devices that have an unknown status with the software update.
Conflict Device CountThe number of devices that have a conflict with the software update.
Not Applicable Device CountThe number of devices that are not applicable for the software update.
Compliant User CountThe number of users that are compliant with the software update.
Non-Compliant User CountThe number of users that are not compliant with the software update.
Remediated User CountThe number of users that have been remediated.
Error User CountThe number of users that have an error with the software update.
Unknown User CountThe number of users that have an unknown status with the software update.
Conflict User CountThe number of users that have a conflict with the software update.
Not Applicable User CountThe number of users that are not applicable for the software update.

Update Subscription

Update a single subscription.

InputCommentsDefault
Connection
Subscription IDThe ID of the subscription to update.
Notification URLThe URL to send notifications to.
Expiration Date TimeSpecifies the date and time when the webhook subscription expires. The time is in UTC, and can be an amount of time from subscription creation that varies for the resource subscribed to.

Update User

Update the properties of a User object.

InputCommentsDefault
Connection
User IdUnique Identifier for the user to update. This can be the user's id or userPrincipalName.
Account EnabledIndicates if the account is enabled.true
Display NameThe display name of the user.
User Principal NameThe updated user principal name of the user. Required if 'Domain' input is provided.
DomainThe updated domain for the user, this must be an existing domain in the tenant, you can list them using the 'List Domains' action. Required if 'User Principal Name' input is provided.
First NameThe updated first name of the user.
Last NameThe updated last name of the user.
Job TitleThe updated job title of the user.
Additional PropertiesAdditional properties to update that are not covered by the other inputs. This should be a JSON object and will be merged with the other inputs. You can get additional properties from the Microsoft Graph API documentation https://learn.microsoft.com/en-us/graph/api/resources/user?view=graph-rest-1.0#json-representation

Wipe Device

Remotely wipe a compromised or lost device.

InputCommentsDefault
Connection
Managed Device IdUnique Identifier for the device to wipe.