Microsoft Intune
App Vendor: Microsoft
App Category: IT Services
Connector Version: 1.0.0
API Version: 1.0.0
About App
The Microsoft Intune app enables organizations to manage and secure devices, applications, and data across their enterprise. It provides cloud-based endpoint management, enforcing security policies, controlling device access, and ensuring compliance for both corporate and personal devices.
The Microsoft Intune app is configured with Cyware Orchestrate to perform the following actions:
Action Name | Description |
|---|---|
Bypass Activation Lock | This action bypasses the activation lock on a managed device. |
Clean Windows Device | This action cleans a Windows device by resetting it. |
Delete User From Shared Apple Device | This action removes a user from a shared Apple device. |
Disable Lost Mode | This action disables lost mode on a managed device. |
Get Managed Device | This action retrieves the details of a managed device using its unique identifier. |
List Managed Devices | This action lists the properties and relationships of all managed devices. |
List Managed Devices by Name | This action retrieves managed devices that match the specified device name. |
Locate Device | This action locates a managed device using its unique identifier. |
Logout Shared Apple Device Active User | This action logs out the active user from a shared Apple device. |
Reboot Device | This action immediately reboots a managed device. |
Recover Device Passcode | This action recovers the passcode of a managed device. |
Remote Lock Device | This action remotely locks a managed device. |
Request Remote Assistance | This action requests remote assistance for a managed device. |
Reset Device Passcode | This action resets the passcode of a managed device. |
Retire Device | This action retires a managed device, removing it from management while retaining user data. |
Scan Windows Defender | This action scans a managed device using Windows Defender. |
Shut Down Device | This action shuts down a managed device. |
Sync Device | This action synchronizes a managed device with Intune to immediately apply pending configurations and policies. |
Update Windows Defender Signatures | This action updates Windows Defender signatures on a managed device. |
Update Windows Device Account | This action updates the Windows account of a managed device. |
Wipe Device | This action wipes a managed device, removing all data and settings, and restores it to its factory default state. |
Generic Action | This is a generic action used to make requests to any Microsoft Intune endpoint. |
Configuration Parameters
The following configuration parameters are required for the Microsoft Intune app to communicate with the Microsoft Intune enterprise application. The parameters can be configured by creating instances in the app.
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Tenant ID | Enter the unique identifier of the Azure AD tenant to authenticate requests within your organization. Example: 73b01b77-0c2b-4dfb-89fd-16eb9a*****f | Text | Required | |
Client ID | Enter the client application ID for authentication. Example: f0cc671c-75dc-404e-af21-88*****d5e8f | Text | Required | |
Client Secret | Enter the client secret associated with the application ID for authentication. Example: iuv8q~tp7ernqta~qzsdjdmkbhhpmpj*****kajm | Password | Required | |
Base URL | Enter the base URL to access Microsoft Graph. | Text | Optional | Default value: https://graph.microsoft.com |
API Version | Enter the API version to be used for requests. | Text | Optional | Default value: v1.0 |
Timeout | Enter the timeout value in seconds. This is the number of seconds requests will wait to connect to Microsoft Intune and read the response. | Integer | Optional | Allowed range: 15-120 Default value: 15 |
Verify | Choose your preference to verify SSL or TLS while making requests. It is recommended to set this option to yes. Passing no may result in incorrectly establishing the connection. | Boolean | Optional | By default, verification is enabled. |
Action: Bypass Activation Lock
This action bypasses the activation lock on a managed device.
Note
You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.
Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Managed Device ID | Enter the unique identifier of the managed device to bypass the activation lock. Example: 705c034c-034c-705c-4c03-5c704c035c70 | Text | Required | You can retrieve this using the List Managed Devices action. |
Action: Clean Windows Device
This action cleans a Windows device by resetting it.
Note
You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.
Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Managed Device ID | Enter the unique identifier of the managed device to clean. Example: 705c034c-034c-705c-4c03-5c704c035c70 | Text | Required | You can retrieve this using the List Managed Devices action. |
Keep User Data | Choose true to retain user data while cleaning. | Boolean | Optional | Default value: true |
Action: Disable Lost Mode
This action disables lost mode on a managed device.
Note
You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.
Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Managed Device ID | Enter the unique identifier of the managed device to disable lost mode. Example: 705c034c-034c-705c-4c03-5c704c035c70 | Text | Required | You can retrieve this using the action List Managed Devices. |
Action: Get Managed Device
This action retrieves the details of a managed device using its unique identifier.
Note
You must have either the DeviceManagementManagedDevices.Read.All (Read Microsoft Intune devices) or DeviceManagementManagedDevices.ReadWrite.All (Read and write Microsoft Intune devices) permission to perform this action.
Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Managed Device ID | Enter the unique identifier of the managed device to retrieve its details. Example: 705c034c-034c-705c-4c03-5c704c035c70 | Text | Required | You can retrieve this using the action List Managed Devices. |
Extra Params | Enter the OData query parameters to filter the response. | Key Value | Optional | Allowed keys: count, expand, filter, format, orderby, search, select, skip, top |
Action: List Managed Devices
This action lists the properties and relationships of all managed devices.
Note
You must have either the DeviceManagementManagedDevices.Read.All (Read Microsoft Intune devices) or DeviceManagementManagedDevices.ReadWrite.All (Read and write Microsoft Intune devices) permission to perform this action.
Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Extra Params | Enter the OData query parameters to filter the response. | Key Value | Optional | Allowed keys: count, expand, filter, format, orderby, search, select, skip, top |
Action: List Managed Devices by Name
This action retrieves managed devices that match the specified device name.
Note
You must have either the DeviceManagementManagedDevices.Read.All (Read Microsoft Intune devices) or DeviceManagementManagedDevices.ReadWrite.All (Read and write Microsoft Intune devices) permission to perform this action.
Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Device Name | Enter the name of the managed device to search for. Example: device-1234 | Text | Required | You can retrieve this using the action List Managed Devices. |
Extra Params | Enter the OData query parameters to filter the response. | Key Value | Optional | Allowed keys: count, expand, filter, format, orderby, search, select, skip, top |
Action: Locate Device
This action locates a managed device using its unique identifier.
Note
You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.
Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Managed Device ID | Enter the unique identifier of the managed device to locate it. Example: 705c034c-034c-705c-4c03-5c704c035c70 | Text | Required | You can retrieve this using the action List Managed Devices. |
Action: Reboot Device
This action immediately reboots a managed device.
Note
You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.
Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Managed Device ID | Enter the unique identifier of the managed device to reboot. Example: 705c034c-034c-705c-4c03-5c704c035c70 | Text | Required | You can retrieve this using the action List Managed Devices. |
Action: Recover Device Passcode
This action recovers the passcode of a managed device.
Note
You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.
Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Managed Device ID | Enter the unique identifier of the managed device to initiate the passcode recovery. Example: 705c034c-034c-705c-4c03-5c704c035c70 | Text | Required | You can retrieve this using the action List Managed Devices. |
Action: Remote Lock Device
This action remotely locks a managed device.
Note
You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.
Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Managed Device ID | Enter the unique identifier of the managed device to lock it remotely. Example: 705c034c-034c-705c-4c03-5c704c035c70 | Text | Required | You can retrieve this using the action List Managed Devices. |
Action: Request Remote Assistance
This action requests remote assistance for a managed device.
Note
You must have the DeviceManagementManagedDevices.ReadWrite.All (Read and write Microsoft Intune devices) permission to perform this action.
Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Managed Device ID | Enter the unique identifier of the managed device to request remote assistance. Example: 705c034c-034c-705c-4c03-5c704c035c70 | Text | Required | You can retrieve this using the action List Managed Devices. |
Action: Reset Device Passcode
This action resets the passcode of a managed device.
Note
You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.
Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Managed Device ID | Enter the unique identifier of the managed device to reset its passcode. Example: 705c034c-034c-705c-4c03-5c704c035c70 | Text | Required | You can retrieve this using the action List Managed Devices. |
Action: Retire Device
This action retires a managed device, removing it from management while retaining user data.
Note
You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.
Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Managed Device ID | Enter the unique identifier of the managed device to retire it. Example: 705c034c-034c-705c-4c03-5c704c035c70 | Text | Required | You can retrieve this using the action List Managed Devices. |
Action: Scan Windows Defender
This action scans a managed device using Windows Defender.
Note
You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.
Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Managed Device ID | Enter the unique identifier of the managed device to scan. Example: 705c034c-034c-705c-4c03-5c704c035c70 | Text | Required | You can retrieve this using the action List Managed Devices. |
Quick Scan | Choose true for a quick scan. If you want a full system scan, choose false. | Boolean | Optional | Default value: True |
Action: Shut Down Device
This action shuts down a managed device.
Note
You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.
Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Managed Device ID | Enter the unique identifier of the managed device to shut it down. Example: 705c034c-034c-705c-4c03-5c704c035c70 | Text | Required | You can retrieve this using the action List Managed Devices. |
Action: Sync Device
This action synchronizes a managed device with Intune to immediately apply pending configurations and policies.
Note
You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.
Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Managed Device ID | Enter the unique identifier of the managed device to sync. Example: 705c034c-034c-705c-4c03-5c704c035c70 | Text | Required | You can retrieve this using the action List Managed Devices. |
Action: Update Windows Defender Signatures
This action updates Windows Defender signatures on a managed device.
Note
You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.
Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Managed Device ID | Enter the unique identifier of the managed device to update Windows Defender signatures. Example: 705c034c-034c-705c-4c03-5c704c035c70 | Text | Required | You can retrieve this using the action List Managed Devices. |
Action: Update Windows Device Account
This action updates the Windows account of a managed device.
Note
You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.
Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Managed Device ID | Enter the unique identifier of the managed device to update the account. Example: 705c034c-034c-705c-4c03-5c704c035c70 | Text | Required | You can retrieve this using the action List Managed Devices. |
Password | Enter the new password for the device account. | Password | Required | |
Device Account Email | Enter the email associated with the device account. | Text | Required | |
Exchange Server | Enter the address of the Exchange server. | Text | Required | |
Session Initiation Protocol Address | Enter the session initiation protocol address for communication. | Text | Required | |
Password Rotation Enabled | Choose true to enable automatic password rotation. | Boolean | Optional | Default value: false |
Calendar Sync Enabled | Choose true to enable calendar synchronization. | Boolean | Optional | Default value: false |
Action: Wipe Device
This action wipes a managed device, removing all data and settings, and restores it to its factory default state.
Note
You must have both the DeviceManagementManagedDevices.ReadWrite.All (Read and write Microsoft Intune devices) and DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permissions to perform this action.
Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Managed Device ID | Enter the unique identifier of the managed device to wipe it. Example: 705c034c-034c-705c-4c03-5c704c035c70 | Text | Required | |
Keep Enrollment Data | Choose true to retain the enrollment data of the device after wiping. | Boolean | Optional | Default value: true |
Keep User Data | Choose true to retain user data when wiping the device. | Boolean | Optional | Default value: true |
macOS Unlock Code | Enter the unlock code required to unlock macOS devices. | Text | Optional | |
Persist eSIM Data Plan | Choose true to retain the eSIM data plan when wiping the device. | Boolean | Optional | Default value: true |
Action: Generic Action
This is a generic action used to make requests to any Microsoft Intune endpoint.
Action Input Parameters
Parameter | Description | Field Type | Required/Optional | Comments |
|---|---|---|---|---|
Method | Enter the HTTP method to make the request. | Text | Required | Allowed values: GET, PUT, POST, DELETE |
Endpoint | Enter the endpoint to make the request to. Example: devicemanagement/manageddevices | Text | Required | |
Query Params | Enter the query parameters to pass to the API. | Key Value | Optional | |
Payload | Enter the payload to make the request. Example: $JSON[{"key_1": "value_1","key_2": "value_2"}] | Any | Optional | |
Extra Fields | Enter the extra fields to pass to the API. | Key Value | Optional | Allowed keys: headers, payload_json, download, files, filename, retry_wait, retry_count, custom_output, response_type |