Assign App
Replace every assignment for the named app. An empty list clears all assignments and requires confirm_clear_all_assignments=true.
ActionTry it
Integrate Microsoft Intune
with your AI CRM
Manage Microsoft Intune devices, policies, applications, enrollment, assignments, and reports through Microsoft Graph.
Explore Triggers and Actions
Assign App Config
Replace every assignment for the named app config. An empty list clears all assignments and requires confirm_clear_all_assignments=true.
ActionTry it
Assign Compliance Policy
Replace the complete assignment target set for one compliance policy; use assignment CRUD tools to manage a single assignment relationship. Clearing all targets requires `confirm_clear_all_assignments=true`.
ActionTry it
Assign Device Config
Replace all group, user, device, collection, exclusion, or scope-tag assignments for an Intune device configuration. Sending an empty collection removes every assignment and requires `confirm_clear_all_assignments=true`.
ActionTry it
Assign Enrollment Config
Replace the complete assignment set for one device enrollment configuration with the supplied assignment targets. Sending an empty collection removes every assignment and requires `confirm_clear_all_assignments=true`.
ActionTry it
Assign User To Device Autopilot Device
Associate one user, identified by the supplied user names, with one Windows Autopilot device identity; no other device identity is changed.
ActionTry it
Bulk Delete Autopilot Device Identities
Permanently unregister the Windows Autopilot device identities matching the supplied serial numbers. Requires `confirm_destructive_action=true`.
ActionTry it
Clean Windows Device Detected App Device
Clean a Windows device addressed as a member of `/deviceManagement/detectedApps/{detectedAppId}/managedDevices`, removing user-installed Win32 apps and restoring policy-managed apps and settings. Select only while traversing from a detected app; prefer `MICROSOFT_INTUNE_CLEAN_WINDOWS_DEVICE_MANAGED_DEVICE` otherwise. Requires `confirm_destructive_action=true`.
ActionTry it
Clean Windows Device Detected App User Device
Clean a Windows device addressed through its detected-app membership and associated user, removing user-installed Win32 apps and restoring policy-managed apps and settings. Select only while traversing from that app and user; prefer `MICROSOFT_INTUNE_CLEAN_WINDOWS_DEVICE_MANAGED_DEVICE` otherwise. Requires `confirm_destructive_action=true`.
ActionTry it
Clean Windows Device Managed Device
Clean a Windows device through the direct `/deviceManagement/managedDevices/{managedDeviceId}` route, removing user-installed Win32 apps and restoring policy-managed apps and settings. Prefer this route whenever the device ID is known. Requires `confirm_destructive_action=true`.
ActionTry it
Commit Apps Content Versions Content File
Commit an uploaded content file to a specific Intune mobile-app content version using its encryption metadata.
ActionTry it
Create App
Create an Intune Android line-of-business app record for deploying an uploaded APK package.
ActionTry it
Create App Category
Create a tenant-wide Intune app category that can be attached to mobile apps.
ActionTry it
Create App Config
Create an Intune iOS managed-app configuration that delivers app settings to targeted devices.
ActionTry it
Create Apps Assignment
Create one Intune app deployment assignment with an install intent and target, without replacing sibling assignments.
ActionTry it
Create Apps Categories
Attach an existing tenant-wide Intune category to a specific mobile app.
ActionTry it
Create Apps Content Version
Create mobileAppContent through the provider-required microsoft.graph.mobileLobApp cast. This generic-call-surface variant is retained separately from the mobile-LOB and managed-LOB endpoint-fidelity variants.
ActionTry it
Create Apps Content Versions Contained App
Create a Windows Universal AppX contained-app entry under a specific generic content version; use the committed-contained-app create tool for the app-level committed route.
ActionTry it
Create Apps Managed Mobile Lob App Content Version
Create mobileAppContent in a managed mobile line-of-business app context through the provider-required microsoft.graph.mobileLobApp cast. This managed-LOB endpoint-fidelity variant is retained separately from the generic and mobile-LOB variants.
ActionTry it
Create Apps Mobile Lob App Content Version
Create mobileAppContent in a mobile line-of-business app context through the provider-required microsoft.graph.mobileLobApp cast. This mobile-LOB endpoint-fidelity variant is retained separately from the generic and managed-LOB variants.
ActionTry it
Create Apps Windows Universal App X Committed Contained Apps
Create a contained-app entry on a Windows Universal AppX app's committedContainedApps route, independent of a specific content-version route.
ActionTry it
Create Compliance Policy
Create a legacy Android compliance policy with its required scheduled block action embedded in the initial request.
ActionTry it
Create Compliance Setting State
Create one device-and-user compliance observation under a setting summary, not aggregate setting counts.
ActionTry it
Create Detected App Device
Create a managed-device record under a specific detected app's managed-devices relationship. Select this route only when the detected app owns the creation context; Microsoft Graph does not serve direct creation on the tenant-wide managed-devices collection.
ActionTry it
Create Detected App Device Malware State
Record a Windows malware detection and its severity, execution, remediation, and threat state beneath a device reached from a detected app. Returns the created malware-state record.
ActionTry it
Create Detected App Devices Log Request
Create a device log-collection request under the managed device reached from a detected app. Returns the request record and its status; use this route only in that relationship context.
ActionTry it
Create Detected App Devices User
Submit Microsoft Graph's documented discriminator-only request to create a user relationship beneath the managed device reached from a detected app. The route accepts no caller-specified user properties and does not create a Microsoft Entra user.
ActionTry it
Create Detected App User Device
Create a managed-device record under a user reached through a detected app and one of its devices. Select this deeply nested route only when continuing that detected-app/user traversal; Microsoft Graph does not serve direct creation on the tenant-wide managed-devices collection.
ActionTry it
Create Device Config
Create an Android custom device configuration with OMA settings in Intune.
ActionTry it
Create Device Configs Assignment
Create one group, user, device, collection, exclusion, or scope-tag assignment for an Intune device configuration.
ActionTry it
Create Enrollment Configs Assignment
Create one target assignment on a device enrollment configuration for a group, collection, all devices, or all licensed users.
ActionTry it
Create Enrollment Limit Config
Create one enrollment limit configuration that caps how many devices targeted users may enroll.
ActionTry it
Create Export Job
Create a persisted Microsoft Intune report export job. Graph returns the new job with HTTP 201; poll the job until completion before using its temporary download URL.
ActionTry it
Create Imported Autopilot Device
Stage one imported Windows Autopilot device identity in Intune from its serial number, hardware identifier, and optional assignment metadata.
ActionTry it
Create Log Request Detected App Device
Create a diagnostic log-collection request for a device addressed as a member of `/deviceManagement/detectedApps/{detectedAppId}/managedDevices`. Select only while traversing from a detected app; prefer `MICROSOFT_INTUNE_CREATE_LOG_REQUEST_MANAGED_DEVICE` otherwise.
ActionTry it
Create Log Request Detected App User Device
Create a diagnostic log-collection request for a device addressed through its detected-app membership and associated user. Select only while traversing from that app and user; prefer `MICROSOFT_INTUNE_CREATE_LOG_REQUEST_MANAGED_DEVICE` otherwise.
ActionTry it
Create Log Request Managed Device
Create a diagnostic log-collection request through the direct `/deviceManagement/managedDevices/{managedDeviceId}` route. Prefer this direct route whenever the managed-device ID is known.
ActionTry it
Delete App
Delete an Intune Android line-of-business app record used for APK deployment. This permanently destroys only the app record; it does not imply a device wipe. Requires `confirm_destructive_action=true`.
ActionTry it
Delete App Category
Delete a tenant-wide Intune app category, not merely one app's category relationship. This permanently destroys only the category; it does not imply a device wipe. Requires `confirm_destructive_action=true`.
ActionTry it
Delete App Config
Delete an Intune iOS managed-app configuration used to deliver app settings. This permanently destroys only the configuration; it does not imply a device wipe. Requires `confirm_destructive_action=true`.
ActionTry it
Delete App Configs Assignment
Delete one target assignment from an Intune mobile-app configuration. This permanently destroys only the assignment; it does not imply a device wipe. Requires `confirm_destructive_action=true`.
ActionTry it
Delete App Configs Device Status
Delete one device deployment-status record from an Intune mobile-app configuration. This permanently destroys only the status record; it does not imply a device wipe. Requires `confirm_destructive_action=true`.
ActionTry it
Delete App Configs User Status
Delete one user deployment-status record from an Intune mobile-app configuration. This permanently destroys only the status record; it does not imply a device wipe. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Apps Assignment
Delete one install-intent target assignment from an Intune mobile app. This permanently destroys only the assignment; it does not imply a device wipe. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Apps Categories
Detach an Intune category from a specific mobile app without deleting the tenant-wide category. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Apps Content Version
Delete mobileAppContent through the provider-required microsoft.graph.mobileLobApp cast. This generic-call-surface variant is retained separately from the mobile-LOB and managed-LOB endpoint-fidelity variants. This permanently destroys only the resource or relationship identified by this endpoint; it does not imply a device wipe. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Apps Content Versions Contained App
Delete a Windows Universal AppX contained-app entry from a specific generic content version, not the app-level committed route. This permanently destroys only that entry; it does not imply a device wipe. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Apps Content Versions Content File
Delete an uploaded content file from a specific Intune mobile-app content version. This permanently destroys only the file record; it does not imply a device wipe. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Apps Managed Mobile Lob App Content Version
Delete mobileAppContent in a managed mobile line-of-business app context through the provider-required microsoft.graph.mobileLobApp cast. This managed-LOB endpoint-fidelity variant is retained separately from the generic and mobile-LOB variants. This destroys only this content version and requires `confirm_destructive_action=true`.
ActionTry it
Delete Apps Mobile Lob App Content Version
Delete mobileAppContent in a mobile line-of-business app context through the provider-required microsoft.graph.mobileLobApp cast. This mobile-LOB endpoint-fidelity variant is retained separately from the generic and managed-LOB variants. This destroys only this content version and requires `confirm_destructive_action=true`.
ActionTry it
Delete Apps Windows Universal App X Committed Contained Apps
Delete a contained-app entry from a Windows Universal AppX app's committedContainedApps route, not a specific content version. This permanently destroys only that entry; it does not imply a device wipe. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Autopilot Device
Permanently unregister one Windows Autopilot device identity without wiping the physical device. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Compliance Policy
Delete one legacy Android compliance policy and its device requirements. This permanently destroys only the resource or relationship identified by this endpoint; it does not imply a device wipe. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Compliance Setting State
Delete one device-and-user compliance observation under a setting summary. This permanently destroys only the resource or relationship identified by this endpoint; it does not imply a device wipe. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Compliance Setting Summary
Delete one setting-and-platform compliance count summary. This permanently destroys only the resource or relationship identified by this endpoint; it does not imply a device wipe. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Detected App
Delete a detected application record. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Detected App Device
Delete a device addressed as a member of `/deviceManagement/detectedApps/{detectedAppId}/managedDevices`; this removes its Intune record and can trigger Retire or Wipe. Select only while traversing from a detected app; prefer `MICROSOFT_INTUNE_DELETE_MANAGED_DEVICE` otherwise. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Detected App Device Malware State
Deletes a windowsDeviceMalwareState. This permanently destroys only the resource or relationship identified by this endpoint; it does not imply a device wipe. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Detected App Devices Log Request
Deletes a deviceLogCollectionResponse. This permanently destroys only the resource or relationship identified by this endpoint; it does not imply a device wipe. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Detected App Devices User
Remove the user relationship record under the specified detected-app managed-device route. This does not delete the user's Microsoft Entra account or wipe the device. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Detected App User Device
Delete a device addressed through its detected-app membership and associated user; this removes its Intune record and can trigger Retire or Wipe. Select only while traversing from that app and user; prefer `MICROSOFT_INTUNE_DELETE_MANAGED_DEVICE` otherwise. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Device Config
Permanently delete an Android custom device configuration from Intune; this does not wipe devices. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Device Configs Assignment
Permanently delete one assignment from an Intune device configuration; this does not delete or wipe devices. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Enrollment Configs Assignment
Permanently remove one target assignment from a device enrollment configuration without deleting the configuration or wiping devices. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Enrollment Limit Config
Permanently delete one enrollment limit configuration without wiping or unenrolling any device. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Export Job
Permanently delete one Intune report export-job resource selected by ID; this does not delete or wipe devices. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Imported Autopilot Device
Permanently delete one staged imported Windows Autopilot device identity without wiping the physical device. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Managed Device
Delete a device through the direct `/deviceManagement/managedDevices/{managedDeviceId}` route. Immediately removes its Intune record and can trigger a platform-dependent Retire or Wipe command. Prefer this direct route whenever the device ID is known. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Shared Apple User Detected App Device
Delete a user and that user's data from a shared Apple device addressed as a detected app's managed-device member. Select only while traversing from that detected app; prefer `MICROSOFT_INTUNE_DELETE_SHARED_APPLE_USER_MANAGED_DEVICE` otherwise. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Shared Apple User Detected App User Device
Delete a user and that user's data from a shared Apple device addressed through a detected app and associated user. Select only while traversing that context; prefer `MICROSOFT_INTUNE_DELETE_SHARED_APPLE_USER_MANAGED_DEVICE` otherwise. Requires `confirm_destructive_action=true`.
ActionTry it
Delete Shared Apple User Managed Device
Delete a user and that user's data from a shared Apple device through the direct `/deviceManagement/managedDevices/{managedDeviceId}` route. Prefer this route whenever the device ID is known. Requires `confirm_destructive_action=true`.
ActionTry it
Disable Lost Mode Detected App Device
Disable Lost Mode for a device addressed as a detected app's managed-device member, removing the recovery lock-screen details. Select only while traversing from that app; prefer `MICROSOFT_INTUNE_DISABLE_LOST_MODE_MANAGED_DEVICE` otherwise. Requires `confirm_destructive_action=true`.
ActionTry it
Disable Lost Mode Detected App User Device
Disable Lost Mode for a device addressed through its detected-app membership and associated user, removing the recovery lock-screen details. Select only while traversing that context; prefer `MICROSOFT_INTUNE_DISABLE_LOST_MODE_MANAGED_DEVICE` otherwise. Requires `confirm_destructive_action=true`.
ActionTry it
Disable Lost Mode Managed Device
Disable Lost Mode through the direct `/deviceManagement/managedDevices/{managedDeviceId}` route, removing the recovery lock-screen message and contact information. Prefer this route whenever the device ID is known. Requires `confirm_destructive_action=true`.
ActionTry it
Enable App Architectures
Enable applicable processor architectures for the named Win32 app.
ActionTry it
Get App
Get one Intune Android line-of-business app and its deployment metadata by app ID.
ActionTry it
Get App Category
Get one tenant-wide Intune app category; use GET_APPS_CATEGORIES for a category through a specific app's categories route.
ActionTry it
Get App Config
Get one Intune iOS managed-app configuration and its delivered settings by configuration ID.
ActionTry it
Get App Configs Assignment
Get one target assignment for a specific Intune mobile-app configuration.
ActionTry it
Get App Configs Device Status
Get one device's deployment status for a specific Intune mobile-app configuration.
ActionTry it
Get App Configs Device Status Summary
Get aggregate per-device deployment outcome counts for a specific Intune mobile-app configuration.
ActionTry it
Get App Configs User Status
Get one user's deployment status for a specific Intune mobile-app configuration.
ActionTry it
Get App Configs User Status Summary
Get aggregate per-user deployment outcome counts for a specific Intune mobile-app configuration.
ActionTry it
Get Apps Assignment
Get one Intune mobile-app assignment, including its install intent, target, and settings.
ActionTry it
Get Apps Categories
Get one category through a specific mobile app's categories route; use GET_APP_CATEGORY for the tenant-wide category route.
ActionTry it
Get Apps Content Version
Read mobileAppContent through the provider-required microsoft.graph.mobileLobApp cast. This generic-call-surface variant is retained separately from the mobile-LOB and managed-LOB endpoint-fidelity variants.
ActionTry it
Get Apps Content Versions Contained App
Get one Windows Universal AppX contained app from a specific generic content version; use the committed-contained-app get tool for the app-level committed route.
ActionTry it
Get Apps Managed Mobile Lob App Content Version
Read mobileAppContent in a managed mobile line-of-business app context through the provider-required microsoft.graph.mobileLobApp cast. This managed-LOB endpoint-fidelity variant is retained separately from the generic and mobile-LOB variants.
ActionTry it
Get Apps Mobile Lob App Content Version
Read mobileAppContent in a mobile line-of-business app context through the provider-required microsoft.graph.mobileLobApp cast. This mobile-LOB endpoint-fidelity variant is retained separately from the generic and managed-LOB variants.
ActionTry it
Get Apps Windows Universal App X Committed Contained Apps
Get one contained app from a Windows Universal AppX app's committedContainedApps route; use the content-version contained-app get tool for a specific version.
ActionTry it
Get Autopilot Device
Retrieve one Windows Autopilot device identity, including its hardware, enrollment, and assigned-user properties.
ActionTry it
Get Cached Report
Query cached Intune report data by ID, with optional column selection, grouping, ordering, search, and paging.
ActionTry it
Get Compliance Device Summary
Get tenant-wide device counts by compliance-policy state; use a policy device status overview for one policy.
ActionTry it
Get Compliance Policies Device Status Overview
Get aggregate compliant, noncompliant, error, and conflict device counts for one policy; use device statuses for individual records.
ActionTry it
Get Compliance Policies User Status Overview
Get aggregate compliant, noncompliant, error, and conflict user counts for one policy; use user statuses for individual rollups.
ActionTry it
Get Compliance Policy
Get one legacy Android compliance policy and its device requirement settings; use LIST_COMPLIANCE_POLICIES to find its ID.
ActionTry it
Get Compliance Policy Non Compliance Report
Query noncompliance details organized by Intune compliance policy; use the summary sibling for aggregated policy results.
ActionTry it
Get Compliance Policy Non Compliance Summary Report
Query summarized noncompliance results organized by Intune compliance policy; use the detail sibling for non-summary results.
ActionTry it
Get Compliance Setting Non Compliance Report
Query noncompliance results organized by compliance setting rather than by compliance policy.
ActionTry it
Get Compliance Setting State
Get one device-and-user compliance observation under a setting summary; use LIST_COMPLIANCE_SETTING_STATES to find its ID.
ActionTry it
Get Compliance Setting Summary
Get one setting-and-platform compliance count summary; use LIST_COMPLIANCE_SETTING_SUMMARIES to find its ID.
ActionTry it
Get Configuration Policy Non Compliance Report
Query noncompliance details organized by Intune configuration policy; use the summary sibling for aggregated policy results.
ActionTry it
Get Configuration Policy Non Compliance Summary Report
Query summarized noncompliance results organized by Intune configuration policy; use the detail sibling for non-summary results.
ActionTry it
Get Configuration Setting Non Compliance Report
Query noncompliance results organized by configuration setting rather than by configuration policy.
ActionTry it
Get Detected App
Retrieve one Intune detected-app inventory record by ID, including its platform, publisher, version, size, and device-count metadata. Use its ID to traverse the app's managed-device relationships.
ActionTry it
Get Detected App Device
Get one device as a member of `/deviceManagement/detectedApps/{detectedAppId}/managedDevices`, returning exactly id, deviceName, operatingSystem, osVersion, complianceState, managementState, and lastSyncDateTime. Select only while traversing from a detected app; prefer `MICROSOFT_INTUNE_GET_MANAGED_DEVICE` otherwise. activationLockBypassCode and remoteAssistanceSessionUrl are omitted.
ActionTry it
Get Detected App Device Malware State
Retrieve one malware-state record under a detected app's managed device, including threat identity, severity, execution state, remediation state, detection count, and timestamps.
ActionTry it
Get Detected App Devices Device Category
Retrieve the category assigned to a managed device reached through a detected app, including the category ID and display metadata. Use only when preserving that detected-app relationship context.
ActionTry it
Get Detected App Devices Log Request
Retrieve one device log-collection request reached through a detected app and managed device, including status, timestamps, initiator, expiration, and log size. Use it to monitor a known request ID.
ActionTry it
Get Detected App Devices User
Retrieve one user relationship attached to a managed device reached through a detected app. Use this route only when the detected-app, device, and user IDs define the current traversal context.
ActionTry it
Get Detected App Devices Windows Protection
Retrieve Windows protection health for a managed device reached through a detected app, including malware protection, scan, signature, reboot, engine, and tamper-protection status.
ActionTry it
Get Detected App User Device
Get one device through its detected-app membership and associated user, returning exactly id, deviceName, operatingSystem, osVersion, complianceState, managementState, and lastSyncDateTime. Select only while traversing that context; prefer `MICROSOFT_INTUNE_GET_MANAGED_DEVICE` otherwise. activationLockBypassCode and remoteAssistanceSessionUrl are omitted.
ActionTry it
Get Device Config
Get one Android custom device configuration and its OMA settings by ID.
ActionTry it
Get Device Configs Device Status Overview
Get aggregate pending, successful, failed, and not-applicable device counts for an Intune device configuration.
ActionTry it
Get Device Configs User Status Overview
Get aggregate pending, successful, failed, and not-applicable user counts for an Intune device configuration.
ActionTry it
Get Device Configuration Device Activity
Retrieve the Intune device configuration activity report for device-scoped activity, returned as report content. Select this when activity must be viewed by device; use `MICROSOFT_INTUNE_GET_DEVICE_CONFIGURATION_USER_ACTIVITY` for user-scoped activity.
ActionTry it
Get Device Configuration State Summary
Get tenant-wide device counts by deployment state across Intune device configurations.
ActionTry it
Get Device Configuration User Activity
Retrieve the Intune device configuration activity report for user-scoped activity, returned as report content. Select this when activity must be viewed by user; use `MICROSOFT_INTUNE_GET_DEVICE_CONFIGURATION_DEVICE_ACTIVITY` for device-scoped activity.
ActionTry it
Get Device Management Intent Per Setting Contributing Profiles
Query the Intune profiles contributing to each device-management intent setting; use the intent-settings sibling for settings rather than profiles.
ActionTry it
Get Device Management Intent Settings Report
Query settings associated with Intune device-management intents; use the contributing-profiles sibling to identify profiles per setting.
ActionTry it
Get Device Management Reports
Retrieve only the tenant's Microsoft Graph reports-root container metadata, such as its root ID and OData type. Use this to inspect the reports container itself; use a specialized report action when report rows, summaries, filters, or export jobs are needed.
ActionTry it
Get Device Non Compliance Report
Query Intune noncompliance results organized by device rather than by policy or setting.
ActionTry it
Get Device Policies Compliance Report
Query device compliance status organized by policy; use the policy-settings sibling for setting-level status. This operation is available only on Microsoft Graph beta and may change before general availability.
ActionTry it
Get Device Policy Settings Compliance Report
Query device compliance status organized by policy setting; use the policies sibling for policy-level status. This operation is available only on Microsoft Graph beta and may change before general availability.
ActionTry it
Get Device Status By Compliance Policy Report
Query detailed device status organized by compliance policy; use the policy summary sibling for summarized status. This operation is available only on Microsoft Graph beta and may change before general availability.
ActionTry it
Get Device Status By Compliance Policy Setting Report
Query detailed device status organized by compliance-policy setting; use the setting summary sibling for summarized status. This operation is available only on Microsoft Graph beta and may change before general availability.
ActionTry it
Get Device Status Summary By Compliance Policy Report
Query summarized device status organized by compliance policy; use the policy detail sibling for detailed status. This operation is available only on Microsoft Graph beta and may change before general availability.
ActionTry it
Get Device Status Summary By Compliance Policy Settings Report
Query summarized device status organized by compliance-policy setting; use the setting detail sibling for detailed status. This operation is available only on Microsoft Graph beta and may change before general availability.
ActionTry it
Get Devices Status By Policy Platform Compliance Report
Query device compliance status organized by both policy and platform; use policy-only siblings when platform is not a needed dimension. This operation is available only on Microsoft Graph beta and may change before general availability.
ActionTry it
Get Devices Status By Setting Report
Query device compliance status organized by setting without selecting a specific compliance-policy hierarchy. This operation is available only on Microsoft Graph beta and may change before general availability.
ActionTry it
Get Devices Without Compliance Policy Report
Query devices that have no compliance policy, for identifying gaps in policy coverage.
ActionTry it
Get Enrollment Config
Retrieve one device enrollment configuration of any subtype by its Microsoft Graph ID.
ActionTry it
Get Export Job
Retrieve one Intune report export job by ID to inspect its current properties and relationships.
ActionTry it
Get Historical Report
Query the named Intune historical report with optional projection, grouping, ordering, search, paging, and filtering.
ActionTry it
Get Imported Autopilot Device
Retrieve one staged imported Windows Autopilot device identity, including its hardware identifier, assignment, and import state.
ActionTry it
Get Managed Device
Get one managed device through the direct `/deviceManagement/managedDevices/{managedDeviceId}` route, returning exactly id, deviceName, operatingSystem, osVersion, complianceState, managementState, and lastSyncDateTime. Prefer this route whenever the device ID is known. activationLockBypassCode and remoteAssistanceSessionUrl are omitted.
ActionTry it
Get Managed Device Enrollment Failure Details
Return detailed managed-device enrollment failures, with optional row offset, limit, filter, and continuation token.
ActionTry it
Get Managed Device Enrollment Top Failures
Return the most frequent managed-device enrollment failures for the optional reporting period.
ActionTry it
Get Managed Device Overview
Retrieve the tenant-wide Intune managed-device overview: enrollment totals plus operating-system and Exchange access-state distributions. Use this for fleet summary counts, not individual devices.
ActionTry it
Get Noncompliant Devices And Settings Report
Query noncompliance results across both device and setting dimensions in one report.
ActionTry it
Get Policy Non Compliance Metadata
Query metadata for Intune policy noncompliance reporting; use report siblings when row or summary data is needed.
ActionTry it
Get Policy Non Compliance Report
Query policy noncompliance details; use the policy summary sibling for aggregated results or metadata sibling for report metadata.
ActionTry it
Get Policy Non Compliance Summary Report
Query summarized policy noncompliance results; use the policy detail sibling for non-summary results.
ActionTry it
Get Report Filters
Query filter metadata for an Intune report before constructing a filtered report request.
ActionTry it
Get Setting Non Compliance Report
Query setting-level noncompliance results when no compliance- or configuration-specific setting family is required.
ActionTry it
Import Autopilot Device Identities
Submit the supplied Windows Autopilot device identities together for import processing in Intune.
ActionTry it
List App Categories
List tenant-wide Intune app categories available for organizing mobile apps.
ActionTry it
List App Configs
List Intune iOS managed-app configurations that deliver settings to targeted apps and devices.
ActionTry it
List App Configs Assignments
List the group or device targets assigned to a specific Intune mobile-app configuration.
ActionTry it
List App Configs Device Statuses
List per-device deployment statuses for a specific Intune mobile-app configuration.
ActionTry it
List App Configs User Statuses
List per-user deployment statuses for a specific Intune mobile-app configuration.
ActionTry it
List App Relationships
List dependency and supersedence relationships between Intune mobile apps.
ActionTry it
List Apps
List Intune Android line-of-business apps used to deploy uploaded APK packages.
ActionTry it
List Apps Assignments
List install-intent target assignments for a specific Intune mobile app.
ActionTry it
List Apps Categories
List categories attached to a specific Intune mobile app; use LIST_APP_CATEGORIES for the tenant-wide category collection.
ActionTry it
List Apps Content Versions
List mobileAppContent versions through the provider-required microsoft.graph.mobileLobApp cast. This is the generic-call-surface variant; do not use an uncast generic route unless Microsoft Graph requires it, and use the separate managedMobileLobApp subtype action only for that app context.
ActionTry it
List Apps Content Versions Contained Apps
List Windows Universal AppX contained apps under a specific generic content version; use the committed-contained-app list tool for the app-level committed route.
ActionTry it
List Apps Managed Mobile Lob App Content Versions
List mobileAppContent through the documented microsoft.graph.managedMobileLobApp cast in a managed mobile line-of-business app context. Use only when Microsoft Graph requires that subtype cast; otherwise use the generic content-version action.
ActionTry it
List Apps Mobile Lob App Content Versions
List mobileAppContent through the concrete microsoft.graph.androidLobApp cast in a mobile line-of-business app context. Use only when Microsoft Graph requires that subtype cast; otherwise use the generic content-version action.
ActionTry it
List Apps Windows Universal App X Committed Contained Apps
List contained apps on a Windows Universal AppX app's committedContainedApps route; use the content-version contained-app list tool for a specific version.
ActionTry it
List Autopilot Devices
List Windows Autopilot device identities one page at a time, including their hardware, enrollment, and assigned-user properties.
ActionTry it
List Compliance Policies
List legacy Android compliance policies that define device security and password requirements.
ActionTry it
List Compliance Policies Assignments
List individual target assignment relationships under one compliance policy; use ASSIGN_COMPLIANCE_POLICY to replace the complete target set.
ActionTry it
List Compliance Policies Device Setting Summaries
List per-setting device-count rollups under one compliance policy, distinct from individual device statuses.
ActionTry it
List Compliance Policies Device Statuses
List individual device evaluation statuses under one compliance policy; use the device status overview for aggregate counts.
ActionTry it
List Compliance Policies User Statuses
List individual user compliance rollups under one policy; use the user status overview for aggregate counts.
ActionTry it
List Compliance Setting States
List individual device-and-user compliance observations under one setting summary, not aggregate setting counts.
ActionTry it
List Compliance Setting Summaries
List setting-and-platform summaries of device compliance counts; use compliance setting states for individual device and user observations.
ActionTry it
List Detected App Device Malware States
List paginated malware-state records beneath a detected app's managed device, including threat severity, execution and remediation states, detection counts, and timestamps.
ActionTry it
List Detected App Devices
List managed devices associated with the named detected app. The sensitive fields activationLockBypassCode and remoteAssistanceSessionUrl are omitted from every returned record. Use only when intentionally traversing the detected-app relationship and its ID is available; for the ordinary device collection, use `MICROSOFT_INTUNE_LIST_MANAGED_DEVICES`.
ActionTry it
List Detected App Devices Log Requests
List paginated log-collection requests for a managed device reached through a detected app, returning request statuses, timestamps, initiators, expiration, and sizes for monitoring or ID lookup.
ActionTry it
List Detected App Devices Users
List paginated user relationships for a managed device reached through a detected app. Use the returned user IDs to continue the detected-app/device/user traversal; this does not list all tenant users.
ActionTry it
List Detected App User Devices
List managed devices through the named detected-app and user relationships. The sensitive fields activationLockBypassCode and remoteAssistanceSessionUrl are omitted from every returned record. Use only when intentionally traversing those relationships and all IDs are available; for the ordinary device collection, use `MICROSOFT_INTUNE_LIST_MANAGED_DEVICES`.
ActionTry it
List Detected Apps
List applications detected on managed devices in Microsoft Intune.
ActionTry it
List Device Configs
List all Intune device configurations across configuration subtypes. Inspect each item's `@odata.type` before passing its ID to a subtype-specific action.
ActionTry it
List Device Configs Assignments
List the group, user, device, collection, exclusion, and scope-tag assignments for an Intune device configuration.
ActionTry it
List Device Configs Device Setting Summaries
List per-setting deployment-state counts for an Intune device configuration.
ActionTry it
List Device Configs Device Statuses
List per-device deployment statuses for an Intune device configuration. Microsoft is deprecating support for this entity starting May 2026 and has not named a replacement: https://learn.microsoft.com/en-us/graph/api/resources/intune-deviceconfig-deviceconfigurationdevicestatus
ActionTry it
List Device Configs User Statuses
List per-user deployment statuses for an Intune device configuration.
ActionTry it
List Enrollment Configs
List device enrollment configurations of every subtype one page at a time, including limit, enrollment-status-page, Windows Hello, and platform-restriction configurations.
ActionTry it
List Enrollment Configs Assignments
List one device enrollment configuration's target assignments one page at a time.
ActionTry it
List Export Jobs
List Intune report export jobs so an agent can select a job to inspect, update, or delete.
ActionTry it
List Imported Autopilot Devices
List staged imported Windows Autopilot device identities one page at a time, including each identity's import state.
ActionTry it
List Managed Devices
List managed-device records. The sensitive fields activationLockBypassCode and remoteAssistanceSessionUrl are omitted from every returned record.
ActionTry it
Locate Device Detected App Device
Asynchronously request location for a device addressed as a detected app's managed-device member. Select only while traversing from that app; prefer `MICROSOFT_INTUNE_LOCATE_DEVICE_MANAGED_DEVICE` otherwise. An empty response only acknowledges the request; observe the result with `MICROSOFT_INTUNE_GET_MANAGED_DEVICE`.
ActionTry it
Locate Device Detected App User Device
Asynchronously request location for a device addressed through its detected-app membership and associated user. Select only while traversing that context; prefer `MICROSOFT_INTUNE_LOCATE_DEVICE_MANAGED_DEVICE` otherwise. An empty response only acknowledges the request; observe the result with `MICROSOFT_INTUNE_GET_MANAGED_DEVICE`.
ActionTry it
Locate Device Managed Device
Asynchronously request device location through the direct `/deviceManagement/managedDevices/{managedDeviceId}` route. Prefer this route whenever the device ID is known. An empty response only acknowledges the request; observe the result with `MICROSOFT_INTUNE_GET_MANAGED_DEVICE`.
ActionTry it
Logout Shared Apple User Detected App Device
Log out the active user from a shared Apple device addressed as a detected app's managed-device member. Select only while traversing from that app; prefer `MICROSOFT_INTUNE_LOGOUT_SHARED_APPLE_USER_MANAGED_DEVICE` otherwise. Unsaved work can be lost. Requires `confirm_destructive_action=true`.
ActionTry it
Logout Shared Apple User Detected App User Device
Log out the active user from a shared Apple device addressed through a detected app and associated user. Select only while traversing that context; prefer `MICROSOFT_INTUNE_LOGOUT_SHARED_APPLE_USER_MANAGED_DEVICE` otherwise. Unsaved work can be lost. Requires `confirm_destructive_action=true`.
ActionTry it
Logout Shared Apple User Managed Device
Log out the active user from a shared Apple device through the direct `/deviceManagement/managedDevices/{managedDeviceId}` route. Prefer this route whenever the device ID is known; unsaved work can be lost. Requires `confirm_destructive_action=true`.
ActionTry it
Reboot Now Detected App Device
Reboot a device addressed as a detected app's managed-device member. Select only while traversing from that app; prefer `MICROSOFT_INTUNE_REBOOT_NOW_MANAGED_DEVICE` otherwise. The active user may lose unsaved work. Requires `confirm_destructive_action=true`.
ActionTry it
Reboot Now Detected App User Device
Reboot a device addressed through its detected-app membership and associated user. Select only while traversing that context; prefer `MICROSOFT_INTUNE_REBOOT_NOW_MANAGED_DEVICE` otherwise. The active user may lose unsaved work. Requires `confirm_destructive_action=true`.
ActionTry it
Reboot Now Managed Device
Reboot a device through the direct `/deviceManagement/managedDevices/{managedDeviceId}` route. Prefer this route whenever the device ID is known; the active user is interrupted and may lose unsaved work. Requires `confirm_destructive_action=true`.
ActionTry it
Remote Lock Detected App Device
Remotely lock a device addressed as a detected app's managed-device member, blocking the active user. Select only while traversing from that app; prefer `MICROSOFT_INTUNE_REMOTE_LOCK_MANAGED_DEVICE` otherwise. Requires `confirm_destructive_action=true`.
ActionTry it
Remote Lock Detected App User Device
Remotely lock a device addressed through its detected-app membership and associated user, blocking the active user. Select only while traversing that context; prefer `MICROSOFT_INTUNE_REMOTE_LOCK_MANAGED_DEVICE` otherwise. Requires `confirm_destructive_action=true`.
ActionTry it
Remote Lock Managed Device
Remotely lock a device through the direct `/deviceManagement/managedDevices/{managedDeviceId}` route, blocking the active user until unlock. Prefer this route whenever the device ID is known. Requires `confirm_destructive_action=true`.
ActionTry it
Remove User Devices Detected App Devices User
Retire all devices from management for this user. Removes all devices associated with the named user from Intune management. Requires `confirm_destructive_action=true`.
ActionTry it
Request Defender Scan Detected App Device
Request a Microsoft Defender scan for a Windows device addressed as a detected app's managed-device member. Select only while traversing from that app; prefer `MICROSOFT_INTUNE_REQUEST_DEFENDER_SCAN_MANAGED_DEVICE` otherwise.
ActionTry it
Request Defender Scan Detected App User Device
Request a Microsoft Defender scan for a Windows device addressed through its detected-app membership and associated user. Select only while traversing that context; prefer `MICROSOFT_INTUNE_REQUEST_DEFENDER_SCAN_MANAGED_DEVICE` otherwise.
ActionTry it
Request Defender Scan Managed Device
Request a Microsoft Defender scan through the direct `/deviceManagement/managedDevices/{managedDeviceId}` route. Prefer this route whenever the managed Windows device ID is known.
ActionTry it
Retire Detected App Device
Retire a device addressed as a detected app's managed-device member, unenrolling it and removing company-managed data while preserving personal data. Select only while traversing from that app; prefer `MICROSOFT_INTUNE_RETIRE_MANAGED_DEVICE` otherwise. Requires `confirm_destructive_action=true`.
ActionTry it
Retire Detected App User Device
Retire a device addressed through its detected-app membership and associated user, unenrolling it and removing company-managed data while preserving personal data. Select only while traversing that context; prefer `MICROSOFT_INTUNE_RETIRE_MANAGED_DEVICE` otherwise. Requires `confirm_destructive_action=true`.
ActionTry it
Retire Managed Device
Retire a device through the direct `/deviceManagement/managedDevices/{managedDeviceId}` route, unenrolling it and removing company-managed data while preserving personal data. Prefer this route whenever the device ID is known. Delivery waits for check-in. Requires `confirm_destructive_action=true`.
ActionTry it
Schedule Rule Actions Compliance Policy
Apply the supplied complete rule-action schedule to one compliance policy; use scheduled-rule-action tools to manage one schedule resource. Clearing the schedule requires `confirm_clear_all_rule_actions=true`.
ActionTry it
Set Priority Enrollment Config
Set one enrollment limit configuration's precedence position for users targeted by multiple configurations.
ActionTry it
Shut Down Detected App Device
Shut down a device addressed as a detected app's managed-device member. Select only while traversing from that app; prefer `MICROSOFT_INTUNE_SHUT_DOWN_MANAGED_DEVICE` otherwise. The active user may lose unsaved work. Requires `confirm_destructive_action=true`.
ActionTry it
Shut Down Detected App User Device
Shut down a device addressed through its detected-app membership and associated user. Select only while traversing that context; prefer `MICROSOFT_INTUNE_SHUT_DOWN_MANAGED_DEVICE` otherwise. The active user may lose unsaved work. Requires `confirm_destructive_action=true`.
ActionTry it
Shut Down Managed Device
Shut down a device through the direct `/deviceManagement/managedDevices/{managedDeviceId}` route. Prefer this route whenever the device ID is known; the active user may lose unsaved work. Requires `confirm_destructive_action=true`.
ActionTry it
Sync Device Detected App Device
Request an immediate policy sync for a device addressed as a detected app's managed-device member. Select only while traversing from that app; prefer `MICROSOFT_INTUNE_SYNC_DEVICE_MANAGED_DEVICE` otherwise.
ActionTry it
Sync Device Detected App User Device
Request an immediate policy sync for a device addressed through its detected-app membership and associated user. Select only while traversing that context; prefer `MICROSOFT_INTUNE_SYNC_DEVICE_MANAGED_DEVICE` otherwise.
ActionTry it
Sync Device Managed Device
Request an immediate Intune policy sync through the direct `/deviceManagement/managedDevices/{managedDeviceId}` route. Prefer this route whenever the managed-device ID is known.
ActionTry it
Unassign User From Device Autopilot Device
Removes the assigned user from the Autopilot device identity, disrupting its user-targeted provisioning association. Requires `confirm_destructive_action=true`.
ActionTry it
Update App
Update deployment metadata for an Intune Android line-of-business app.
ActionTry it
Update App Category
Update a tenant-wide Intune app category's properties, independent of any one app relationship.
ActionTry it
Update App Config
Update the settings or metadata of an Intune iOS managed-app configuration.
ActionTry it
Update App Configs Assignment
Update one target assignment for a specific Intune mobile-app configuration.
ActionTry it
Update App Configs Device Status
Update one device's deployment-status record for a specific Intune mobile-app configuration.
ActionTry it
Update App Configs User Status
Update one user's deployment-status record for a specific Intune mobile-app configuration.
ActionTry it
Update Apps Assignment
Update one Intune mobile-app assignment's target or settings.
ActionTry it
Update Apps Categories
Update a category through a specific mobile app's categories route; use UPDATE_APP_CATEGORY for the tenant-wide route.
ActionTry it
Update Apps Content Version
Update mobileAppContent through the provider-required microsoft.graph.mobileLobApp cast. This generic-call-surface variant is retained separately from the mobile-LOB and managed-LOB endpoint-fidelity variants.
ActionTry it
Update Apps Content Versions Contained App
Update a Windows Universal AppX contained-app entry under a specific generic content version; use the committed-contained-app update tool for the app-level committed route.
ActionTry it
Update Apps Managed Mobile Lob App Content Version
Update mobileAppContent in a managed mobile line-of-business app context through the provider-required microsoft.graph.mobileLobApp cast. This managed-LOB endpoint-fidelity variant is retained separately from the generic and mobile-LOB variants.
ActionTry it
Update Apps Mobile Lob App Content Version
Update mobileAppContent in a mobile line-of-business app context through the provider-required microsoft.graph.mobileLobApp cast. This mobile-LOB endpoint-fidelity variant is retained separately from the generic and managed-LOB variants.
ActionTry it
Update Apps Windows Universal App X Committed Contained Apps
Update a contained-app entry on a Windows Universal AppX app's committedContainedApps route; use the content-version update tool for an entry owned by a specific version.
ActionTry it
Update Compliance Policy
Update device security or password requirements on one legacy Android compliance policy.
ActionTry it
Update Compliance Policy Rule Action Config
Update one enforcement action or delay within a scheduled compliance rule-action container.
ActionTry it
Update Compliance Setting State
Update one device-and-user compliance observation under a setting summary, not its aggregate counts.
ActionTry it
Update Compliance Setting Summary
Update aggregate device compliance counts for one setting and platform, not an individual device setting state.
ActionTry it
Update Defender Signatures Detected App Device
Request a Defender security-intelligence update for a Windows device addressed as a detected app's managed-device member. Select only while traversing from that app; prefer `MICROSOFT_INTUNE_UPDATE_DEFENDER_SIGNATURES_MANAGED_DEVICE` otherwise.
ActionTry it
Update Defender Signatures Detected App User Device
Request a Defender security-intelligence update for a Windows device addressed through its detected-app membership and associated user. Select only while traversing that context; prefer `MICROSOFT_INTUNE_UPDATE_DEFENDER_SIGNATURES_MANAGED_DEVICE` otherwise.
ActionTry it
Update Defender Signatures Managed Device
Request a Microsoft Defender security-intelligence update through the direct `/deviceManagement/managedDevices/{managedDeviceId}` route. Prefer this route whenever the managed Windows device ID is known.
ActionTry it
Update Detected App
Update a detected application's properties.
ActionTry it
Update Detected App Device
Update ownership classification, administrator-friendly name, or notes for a device addressed as a detected app's managed-device member. Select only while traversing from that app; prefer `MICROSOFT_INTUNE_UPDATE_MANAGED_DEVICE` otherwise.
ActionTry it
Update Detected App Device Malware State
Update supplied threat identity, severity, execution, remediation, detection-count, category, URL, or timestamp fields on a known malware-state record beneath a detected app's managed device.
ActionTry it
Update Detected App Devices Device Category
Submit Microsoft Graph's documented discriminator-only device-category PATCH for a managed device reached through a detected app. This update route accepts no caller-specified category or other writable state, so it cannot assign or change a category; use `MICROSOFT_INTUNE_GET_DETECTED_APP_DEVICES_DEVICE_CATEGORY` to retrieve the same relationship without issuing a PATCH. Select this action only when the provider's exact discriminator-only PATCH operation is explicitly required.
ActionTry it
Update Detected App Devices Log Request
Update supplied status, identity, timing, initiator, expiration, size, or enrollment metadata on a known log-collection request reached through a detected app and managed device; returns the updated request.
ActionTry it
Update Detected App Devices User
Submit Microsoft Graph's documented discriminator-only PATCH for the existing user relationship reached through a detected app and managed device. The route accepts no caller-specified user properties and does not edit the user's Microsoft Entra profile.
ActionTry it
Update Detected App Devices Windows Protection
Update supplied Windows protection health fields for a managed device reached through a detected app, such as malware protection, scan, signature, reboot, engine, product, or tamper status.
ActionTry it
Update Detected App User Device
Update ownership classification, administrator-friendly name, or notes for a device addressed through its detected-app membership and associated user. Select only while traversing that context; prefer `MICROSOFT_INTUNE_UPDATE_MANAGED_DEVICE` otherwise.
ActionTry it
Update Device Config
Update the name, description, version, or OMA settings of an Android custom device configuration in Intune.
ActionTry it
Update Device Properties Autopilot Device
Update only the supplied user principal name, addressable user name, group tag, or display name on one Windows Autopilot device identity.
ActionTry it
Update Enrollment Configs Assignment
Replace the target of one assignment on a device enrollment configuration.
ActionTry it
Update Enrollment Limit Config
Update only the supplied limit, priority, version, name, or description on one enrollment limit configuration.
ActionTry it
Update Export Job
Update the supplied properties of one Intune report export job selected by ID.
ActionTry it
Update Managed Device
Update a device through the direct `/deviceManagement/managedDevices/{managedDeviceId}` route, changing its ownership classification, administrator-friendly name, or notes. Prefer this direct route for ordinary device maintenance over detected-app relationship variants.
ActionTry it
Verify Enrollment Autodiscovery
Check whether Windows enrollment auto-discovery is configured for one domain and return Microsoft Graph's Boolean result.
ActionTry it
Wipe Detected App Device
Wipe a device addressed as a member of `/deviceManagement/detectedApps/{detectedAppId}/managedDevices`. Select this relationship route only while traversing from a detected app; prefer `MICROSOFT_INTUNE_WIPE_MANAGED_DEVICE` for ordinary device operations. Factory-resets by default, with platform-dependent retention options. Requires `confirm_destructive_action=true`.
ActionTry it
Wipe Detected App User Device
Wipe a device addressed through its detected-app membership and associated user. Select this nested relationship route only while traversing from that detected app and user; prefer `MICROSOFT_INTUNE_WIPE_MANAGED_DEVICE` for ordinary device operations. Factory-resets by default, with platform-dependent retention options. Requires `confirm_destructive_action=true`.
ActionTry it
Wipe Managed Device
Wipe a device through the direct `/deviceManagement/managedDevices/{managedDeviceId}` route. Factory-resets it by default, removing personal and organizational data, apps, and configurations; retention options vary by platform. Prefer this direct route whenever the managed-device ID is known. Graph acceptance is not completion. Requires `confirm_destructive_action=true`.
ActionTry it
How the Microsoft Intune integration works
The Microsoft Intune integration connects your Dench AI CRM directly to Microsoft Intune, so agents can read and act on your Microsoft Intune data as part of everyday work — answering questions in chat, keeping your CRM in sync, and running automations without anyone copying data between tools.
250 actions are available for agents to invoke on your behalf. Every call runs through Microsoft Intune's own authorization, scoped to the account you connect.
Set up Microsoft Intune in Dench
- 1
Sign in to your Dench workspace and open Integrations.
- 2
Find Microsoft Intune and click Connect — you'll authorize access through Microsoft Intune's own sign-in flow. No API keys or code required.
- 3
Ask an agent to use Microsoft Intune in chat, or call it from an automation.
- 4
Manage or disconnect the connection any time from workspace settings.
Frequently asked questions
How does the Microsoft Intune integration work with Dench?
The Dench Microsoft Intune integration connects your AI CRM to Microsoft Intune, so AI agents can work with your Microsoft Intune data as part of chats, automations, and CRM workflows. You connect your account once, and every agent in your workspace can use it — governed by your workspace permissions.
What actions can AI agents perform with Microsoft Intune via Dench?
The Microsoft Intune integration currently exposes 250 actions, including Assign App, Assign App Config, Assign Compliance Policy, Assign Device Config, Assign Enrollment Config, and Assign User To Device Autopilot Device. Agents invoke them on your behalf from chat or from automations.
Do I need to write code to connect Microsoft Intune to Dench?
No. You connect Microsoft Intune from your Dench workspace using Microsoft Intune's own sign-in and authorization flow — no API keys to copy, no glue code to maintain.
Is the Microsoft Intune integration secure?
Connections are authorized through Microsoft Intune's own authentication flow, and Dench stores only the authorization needed to act on your behalf. You can review and disconnect the Microsoft Intune connection from your workspace settings at any time.