Source: https://manu-tests-all-orgs.docs-staging.pageloop.ai/integrations/asset-endpoint-management/microsoft-intune

# Microsoft Intune

# Microsoft Intune

## Microsoft Intune: Permissions and setup

### Permissions

To connect your Atomicwork and Microsoft Intune accounts, you need:

- **Atomicwork admin access**: You need org admin access in Atomicwork.
- [**Microsoft Entra access.**](https://support.atomicwork.com/en/articles/12284111)

| **Permission**                                          | **Usecase**                                                                                             |
| ------------------------------------------------------- | ------------------------------------------------------------------------------------------------------- |
| User.Read.All                                           | Required to pull user device information                                                                |
| DeviceManagementApps.ReadWrite.All                      | Required to read assignments and write assignments against users                                        |
| Group.ReadWrite.All                                     | Required for a skill/AI workflow - to install apps on user devices                                      |
| DeviceManagementManagedDevices.PrivilegedOperations.All | Required for critical remote operations involving user devices like ‘Erase data’ and remote lock action |
| DeviceManagementManagedDevices.Read.All                 | Required to read all the device information                                                             |
| DeviceManagementManagedDevices.ReadWrite.All            | Required for operations involving user devices like ‘Erase data’ and remote lock action                 |

### Setup

- As an Atomicwork admin, navigate to **Settings > App Store > Microsoft Intune,** and click on **Connect**.
- Click on **Enable** to access a page that displays the permissions Atomicwork needs to successfully leverage the integration.
- Click on **Accept.**

Atomicwork automatically ingests the full set of Microsoft Intune device attributes such as device hardware, OS and compliance state, enrollment status, last check-in, installed software, network configuration, and user assignment.

Admins do not need to manually select Intune fields or map remote Intune fields to Atomicwork attributes.

---