1. Expel Support Center
  2. Connect your technology
  3. SaaS integrations

Microsoft Intune setup for Workbench

Sharon Burton
  • Updated

This article helps you provide the provisioning of the Azure App needed to perform the graph API queries for the deviceManagement endpoint, which allows the Expel Workbench to collect logs for Microsoft Intune.

Tip

This article was accurate at the time of writing, but changes happen. If you find the instructions are outdated, leave a description in the comment field below and let us know!

Step 1: Enable console access

Having read-only access to the interface of your technology allows Expel to dig deeper during incident investigations. Our device health team uses this access to investigate potential health issues with your tech.

  1. Sign into Azure and search for app registrations.

    Intune_step1_SearchAppRegist.png

  2. In the App registrations pane, select New registration.

    Intune_step2_NewRegist.png

  3. Give the application a name, choose the supported account type that can access the API, assign a redirect URL if needed, and click Register to create the app.

    Intune_step3_RegistAnApp.png

  4. After you load into the app, select API permissions to begin selecting the necessary permissions for the integration.

    Intune_step4_SelectAPIpermiss.png

  5. Choose to add permissions to the app and select Microsoft Graph > Application permissions, and then scroll down to DeviceManagementApps. Select DeviceManagementApps.Read.All and click Add permissions to prepare the grant permissions request.

    Intune_step5_DevMgmtAppsPermiss.png

  6. Create a Client secret to enter into Workbench to facilitate API authentication for alert polling. Save this for later use.

    Intune_step6-1_ClientSecret.png
    Intune_step6-2_ClientSecret.png
    Intune_step6-3_ClientSecret.png

  7. As an Administrator, navigate to the Expel Admin Consent Page.

  8. Review and accept the requested permissions.

  9. The Expel Intune Integration app should now appear under Enterprise Applications. Review properties and make sure that all permissions were properly granted.

Step 2: Configure Slack in Expel Workbench

Now that we have the correct access configured and noted the credentials, we can integrate your tech with Workbench.

  1. In a new browser tab, click this link to open the Add Security Device screen in Workbench.

    Intune_AddSecDev.png

  2. Fill in the fields like this:

    Field Name

    What to put in it

    Name

    What you want to name the security device.

    Location

    Geographic location of the server.

    Intune (tenant) ID

     

    Application (client) ID

    Application (client) secret

    The client secret created in Step 1.

  3. Click Save.

To check if alerts are coming through, navigate to Alerts on the console page. Click the icon in the upper right to switch to grid view, then check the list for device alerts.

  • Was this article helpful?

  • 0 out of 0 found this helpful

Related articles