Data Application Connected to Intune's Centralized Data Hub

Data Application Connected to Intune's Centralized Data Hub

The Intune Data Warehouse Connector Application is a powerful tool designed to connect to the Intune Data Warehouse, a historical collection of Intune data that differs from the data available to Intune. This application, written in PowerShell, requires an internet connection to run and is essential for querying and reading collection data from the Intune Data Warehouse.

Registering an Application and Configuring API Permissions

To use the Intune Warehouse Connector Application, you'll first need to register an application in Microsoft Entra ID (Azure AD). Here's a step-by-step guide:

1. Navigate to the Microsoft Azure Admin Center > Microsoft Entra ID > App registrations.
2. Click New registration.
3. Enter a name for your application, such as "Intune Warehouse Connector".
4. Select the supported account types, usually "Accounts in this organizational directory only".
5. Click Register to create the app.

Next, you'll need to configure API permissions:

1. In the app registration, go to API permissions.
2. Add the necessary Microsoft Graph permissions, including and for accessing the Intune Data Warehouse API.
3. Ensure these permissions are application permissions (not delegated).
4. Grant admin consent for the permissions.

Creating an Application Secret (Client Secret)

1. In the app registration, navigate to Certificates & secrets.
2. Click New client secret, provide a description, and set an expiration period.
3. Click Add and copy the generated secret value immediately (you won't see it again).

Collecting Necessary Values for the Connector Configuration

After creating the application secret, you'll need to collect the following values:

• Application (client) ID
• Directory (tenant) ID
• Client secret (application key)

Configuring the Intune Warehouse Connector Application

Finally, you can configure the Intune Warehouse Connector Application using the collected values:

1. Enter the Application (client) ID as the Azure Client ID.
2. Enter the Directory (tenant) ID as the Azure Tenant ID.
3. Enter the generated client secret as the application key.

Verifying Connection with Intune Data Warehouse

To confirm the connection with the Intune Data Warehouse, you can use a cURL or Postman request to acquire an access token with your client ID and secret against the endpoint, requesting the scope . Then, use the access token to query the Intune Data Warehouse API endpoints to confirm permissions are accurate.

This setup follows the standard Azure AD application registration and secret creation procedure tailored for Intune's Data Warehouse API access as implied by Microsoft documentation on Intune API access and application registration.

The Intune Data Warehouse Connector Application provides information on devices and device policies, user management, Mobile Application Management (MAM), and miscellaneous management of the Intune environment. Each section displays its respective data in a separate section within a GUI window. It's important to note that the application does not provide information on user management data related to the applied MAM policies or specific information on the MAM policies applied to mobile applications.

Technology plays a crucial role in the process, as the Intune Data Warehouse Connector Application, a tool for data-and-cloud-computing, requires an internet connection to run and function effectively. The application's technology, written in PowerShell, enables querying and reading collection data from the Intune Data Warehouse.

Read also: