Microsoft Intune

What it covers

Device posture: managed-device compliance and disk encryption.

Credential to create

Microsoft Entra app registration (app-only Graph access)

Register an app

Permissions to grant

• DeviceManagementManagedDevices.Read.All (managed device inventory and compliance)

Setup steps

1. Register an app in Microsoft Entra (Intune uses Microsoft Graph), add the application permission above, and grant admin consent.
2. Create a client secret on the app registration.
3. In Joopler, enter the Directory (tenant) ID and Application (client) ID and paste the client secret. Joopler mints and refreshes the Graph token itself.

Notes and gotchas

• The durable path is tenant id + client id + client secret. You can instead paste a one-off Graph token, but it expires in about an hour. Entra and Intune can share one app registration.
• Admin consent URL: https://login.microsoftonline.com/{tenant}/adminconsent?client_id={clientId}