Microsoft Intune
Microsoft Intune
Microsoft Intune: Permissions and setup
Permissions
To connect your Atomicwork and Microsoft Intune accounts, you need:
- Atomicwork admin access: You need org admin access in Atomicwork.
- Microsoft Entra access.
| Permission | Usecase |
|---|---|
| User.Read.All | Required to pull user device information |
| DeviceManagementApps.ReadWrite.All | Required to read assignments and write assignments against users |
| Group.ReadWrite.All | Required for a skill/AI workflow - to install apps on user devices |
| DeviceManagementManagedDevices.PrivilegedOperations.All | Required for critical remote operations involving user devices like ‘Erase data’ and remote lock action |
| DeviceManagementManagedDevices.Read.All | Required to read all the device information |
| DeviceManagementManagedDevices.ReadWrite.All | Required for operations involving user devices like ‘Erase data’ and remote lock action |
Setup
- As an Atomicwork admin, navigate to Settings > App Store > Microsoft Intune, and click on Connect.
- Click on Enable to access a page that displays the permissions Atomicwork needs to successfully leverage the integration.
