InTune data source

InTune is a tool produced by Microsoft that is used for systems management and patching.

The InTune data source uses an API connection to bring data into Data Manager.

How to connect InTune to Data Manager

1. Gather all of the Data Manager type information, including the data source name, short display name, and the data source type.

2. Gather the InTune fields – this may require consultation with the InTune subject matter expert (SME).

3. In Data Manager, add a new data source by selecting the tool you which to connect and configure with all the gathered information.

Each time this data source is fetched the data becomes raw data.

Data Manager fields

You need to specify the following information from Data Manager:

• data source name – the name of the data source used to run, transform, map, cleanse, and import the data.

• Short display name – a unique name as a data source label.

• data source type – what type of data the tool is providing. For example, Assets, CMDB, user location.

InTune fields

You need to specify the following information from InTune:

• Tenant ID – a unique identifier that identifies the Azure AD tenant to use for authentication.

• Client ID – a unique identifier to identify the Microsoft InTune application in Azure AD.

• Client secret – a secret string that the application uses to prove its identity when requesting a token.

• API timeout – the amount of time that can pass before the service times out (recommended 9000).

• API limit – limits the amount of request/quantity of data (or records) to be consumed by Data Manager and transferred to the back‑end staging database.

API timeout

An API timeout occurs if the service takes longer than expected to respond to a call. If a timeout occurs, it results in a 500 error status code with details about the timeout in the response.

Timeouts are typically caused by:

• the call involving too much data

• a network or service issue

The default value for this field is 0, but it’s recommended to set this field manually to a value of 9000.

If the data source server cannot handle this value, gradually lower the API timeout value to a minimum of 2000, or consult the vendor documentation.

API limit

The API limit field controls how many records are retrieved per call.

• Default: 0 (no restriction).

• Recommended: 1000 when connecting to a heavily populated source.

認証と承認

1. Register the application using the Azure portal to obtain the Tenant ID, Client ID and Application ID.

2. Generate the Client secret to obtain the Client secret ID.

3. On the application’s Overview page, under Manage, select API permissions > Add a permission.

4. Select Microsoft Graph from the list of available APIs.

5. Add the following permission: Permission: DeviceManagementManagedDevices.Read.All and Users.Read.All

6. Type: Application (not Delegated)

7. Admin consent: Yes

8. 管理者の同意を付与します。

API calls

The API calls for InTune are:

• Device.Read.All

• Users.Read.All

Fields retrieved

次のフィールドが取得されます。

Warning messages