---
title: Microsoft Intune
description: "Microsoft Intune is a cloud-based service that focuses on mobile device management (MDM) and mobile application management (MAM). Lucidum uses the Intune connector to ingest data from Microsoft Intune. ## Requirements To use the Intune Connector in Lucidum: 1. Before…"
url: "https://lucidum.io/docs/microsoft-intune/"
updated: "2026-01-09"
category: Connectors / List of Connectors / M
---

# Microsoft Intune

Microsoft Intune is a cloud-based service that focuses on mobile device management (MDM) and mobile application management (MAM).

Lucidum uses the Intune connector to ingest data from Microsoft Intune.

## Requirements

To use the Intune Connector in Lucidum:

1. Before configuring the Microsoft Intune connector in Lucidum, you must first [define a client in Azure](https://lucidum.io/docs/microsoft-intune/#prerequisite_creating_a_client_in_microsoft_azure). Lucidum will use the client and its secret to access Intune.
2. You can then [configure the Intune connector in Lucidum](https://lucidum.io/docs/microsoft-intune/#configuring_the_intune_connector) and start ingesting data from Microsoft Intune.

## Prerequisite: Creating a Client in Microsoft Azure

If you are already using Lucidum to ingest data from Microsoft Azure and Azure AD, you have already [created a read-only application in Azure](https://lucidum.io/docs/microsoft-azure/#prerequisite_creating_an_azure_application) that allows Lucidum to retrieve information from Azure and Azure Active Directory. You can use the same application to ingest data from Intune.

If you have not already created a read-only application in Azure, [follow these steps](https://lucidum.io/docs/microsoft-azure/#creating-a-client-in-microsoft-azure-5-minutes) to do so.

### Configure the Existing Azure Client for Intune (5 minutes)

To configure the existing Azure client for Intune:

| 1.      Log in to the Azure Portal. | - [https://portal.azure.com/](https://portal.azure.com/) - Log in with an Azure AD global administrator account - **NOTE**: Do not log in with the Application Administrator account. This Application Administrator account does not have the required privileges. |
| --- | --- |
| 2.      Click **Home > More Services ID**. |  |
| 3.       In **All Services** page: | - In ***Filter Services***, enter **Intune** - Click the **Intune** link - The **Microsoft Intune admin center** page opens in a new tab |
| 4.      In the **Microsoft Intune admin center** page: | - In the left menu, click **Reports** |
| 5.      In the **Reports** page: | - Expand **Intune data warehouse** - Click **Data warehouse** - Note and copy ***OData feed for reporting service*** |
| 6.      In the **Azure > All Services** page: | - In ***Filter Services***, enter **Entra ID** - Click the **Microsoft Entra ID** link |
| 7.      In the **Overview** page: | - In the left menu, click **App registrations** - Click the app your created. For example *lucidum_connector_app*. |
| 8.      In the **<name of your app>** page: | - In the left pane, click **API permissions** - In the Main pane, click **Add a permission** - In the **Request API permissions** pane (far right): - Click **Intune** - Click**Application permissions** - Click**get data warehouse** - Click**Add permissions** - In the **Request API permissions** pane (far right): - Click **Microsoft Graph** - Click**Application permissions** - Click **DeviceManagementApp.Read.All** - Click **DeviceManagementServiceConfig.Read.All** - Click**Add permissions** |

## Configuring the Intune Connector

To configure Lucidum to ingest data from Intune:

1. Login to Lucidum
2. In the left menu bar, click the **Connectors** icon
3. In the **Connectors** page, click on the tile for **Microsoft Intune**.
4. In the **Settings** page, go to the **Configured Profiles** Click the **Add New Profile** (plus-sign) icon.
5. In the right pane, provide value in the following fields:

| **Field** | **Description** | **Example** |
| --- | --- | --- |
| ***Profile Name*** | A name for the Connector profile | lucidum-intune |
| ***URL*** | The URL for the Intune API.This is the value of ***OData feed for reporting service*** that you captured in **step 5**in the [section above](https://lucidum.io/docs/microsoft-intune/#configure-the-existing-azure-client-for-intune-5-minutes). | https://fef.amsua0602.manage.microsoft.com/ReportingService/DataWarehouseFEService/ |
| ***Client ID*** | Enter the value for ***Application (client) ID***. You captured this value in **step 5** when [defining the Azure client](https://lucidum.io/docs/microsoft-azure/#creating-a-client-in-microsoft-azure-5-minutes) | 5ab80b67-a333-499f-91d9-8f3c573045ac |
| ***Client secret*** | Enter the value for ***Secret ID*** from **step 6** when [defining the Azure client](https://lucidum.io/docs/microsoft-azure/#creating-a-client-in-microsoft-azure-5-minutes) | abcdefghijklmnopqrstuvwxyz1234567890ABCDEFGHIKLMNOPQRSTUVWXYZ |
| ***Tenant ID*** | Enter the value for ***Directory (tenant) ID*** from **step 5** when [defining the Azure client](https://lucidum.io/docs/microsoft-azure/#creating-a-client-in-microsoft-azure-5-minutes). | 30930e4c-6cea-4c29-89d8-81e55978da47 |

1. Click **Save**.
2. To test the configuration, click **Test**.

- - If the connector is configured correctly, Lucidum displays a list of services that are accessible with the connector.
  - If the connector is not configured correctly, Lucidum displays an error message.

## API Documentation

- Intune data warehouse models: [https://docs.microsoft.com/en-us/mem/intune/developer/reports-nav-intune-data-warehouse](https://docs.microsoft.com/en-us/mem/intune/developer/reports-nav-intune-data-warehouse)
- Intune Graph API reports: [https://docs.microsoft.com/en-us/mem/intune/fundamentals/reports-export-graph-apis#next-steps](https://docs.microsoft.com/en-us/mem/intune/fundamentals/reports-export-graph-apis#next-steps)
- SDK: [https://avleonov.com/2021/06/09/getting-hosts-from-microsoft-intune-mdm-using-python/](https://avleonov.com/2021/06/09/getting-hosts-from-microsoft-intune-mdm-using-python/)