Skip to main content

Microsoft Intune

App Vendor: Microsoft

App Category: IT Services

Connector Version: 1.0.0

API Version: 1.0.0

About App

The Microsoft Intune app enables organizations to manage and secure devices, applications, and data across their enterprise. It provides cloud-based endpoint management, enforcing security policies, controlling device access, and ensuring compliance for both corporate and personal devices.

The Microsoft Intune app is configured with Cyware Orchestrate to perform the following actions:

Action Name

Description

Bypass Activation Lock

This action bypasses the activation lock on a managed device.

Clean Windows Device

This action cleans a Windows device by resetting it.

Delete User From Shared Apple Device

This action removes a user from a shared Apple device.

Disable Lost Mode

This action disables lost mode on a managed device.

Get Managed Device

This action retrieves the details of a managed device using its unique identifier.

List Managed Devices

This action lists the properties and relationships of all managed devices.

List Managed Devices by Name

This action retrieves managed devices that match the specified device name.

Locate Device

This action locates a managed device using its unique identifier.

Logout Shared Apple Device Active User

This action logs out the active user from a shared Apple device.

Reboot Device

This action immediately reboots a managed device.

Recover Device Passcode

This action recovers the passcode of a managed device.

Remote Lock Device

This action remotely locks a managed device.

Request Remote Assistance

This action requests remote assistance for a managed device.

Reset Device Passcode

This action resets the passcode of a managed device.

Retire Device

This action retires a managed device, removing it from management while retaining user data.

Scan Windows Defender

This action scans a managed device using Windows Defender.

Shut Down Device

This action shuts down a managed device.

Sync Device

This action synchronizes a managed device with Intune to immediately apply pending configurations and policies.

Update Windows Defender Signatures

This action updates Windows Defender signatures on a managed device.

Update Windows Device Account

This action updates the Windows account of a managed device.

Wipe Device

This action wipes a managed device, removing all data and settings, and restores it to its factory default state.

Generic Action

This is a generic action used to make requests to any Microsoft Intune endpoint.

Configuration Parameters

The following configuration parameters are required for the Microsoft Intune app to communicate with the Microsoft Intune enterprise application. The parameters can be configured by creating instances in the app.

Parameter

Description

Field Type

Required/Optional

Comments

Tenant ID

Enter the unique identifier of the Azure AD tenant to authenticate requests within your organization.

Example:

73b01b77-0c2b-4dfb-89fd-16eb9a*****f

Text

Required

Client ID

Enter the client application ID for authentication.

Example:

f0cc671c-75dc-404e-af21-88*****d5e8f

Text

Required

Client Secret

Enter the client secret associated with the application ID for authentication.

Example:

iuv8q~tp7ernqta~qzsdjdmkbhhpmpj*****kajm

Password

Required

Base URL

Enter the base URL to access Microsoft Graph.

Text

Optional

Default value:

https://graph.microsoft.com

API Version

Enter the API version to be used for requests.

Text

Optional

Default value:

v1.0

Timeout

Enter the timeout value in seconds. This is the number of seconds requests will wait to connect to Microsoft Intune and read the response.

Integer

Optional

Allowed range:

15-120

Default value:

15

Verify

Choose your preference to verify SSL or TLS while making requests. It is recommended to set this option to yes. Passing no may result in incorrectly establishing the connection.

Boolean

Optional

By default, verification is enabled.

Action: Bypass Activation Lock

This action bypasses the activation lock on a managed device.

Note

You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.

Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Managed Device ID

Enter the unique identifier of the managed device to bypass the activation lock.

Example:

705c034c-034c-705c-4c03-5c704c035c70

Text

Required

You can retrieve this using the List Managed Devices action.

Action: Clean Windows Device

This action cleans a Windows device by resetting it.

Note

You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.

Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Managed Device ID

Enter the unique identifier of the managed device to clean.

Example:

705c034c-034c-705c-4c03-5c704c035c70

Text

Required

You can retrieve this using the List Managed Devices action.

Keep User Data

Choose true to retain user data while cleaning.

Boolean

Optional

Default value:

true

Action: Delete User From Shared Apple Device

This action removes a user from a shared Apple device.

Note

You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.

Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Managed Device ID

Enter the unique identifier of the managed device to remove the user from.

Example:

705c034c-034c-705c-4c03-5c704c035c70

Text

Required

You can retrieve this using the action List Managed Devices.

User Principal Name

Enter the user principal name of the user to be removed.

Example:

johndoe@orgname.com

Text

Required

Action: Disable Lost Mode

This action disables lost mode on a managed device.

Note

You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.

Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Managed Device ID

Enter the unique identifier of the managed device to disable lost mode.

Example:

705c034c-034c-705c-4c03-5c704c035c70

Text

Required

You can retrieve this using the action List Managed Devices.

Action: Get Managed Device

This action retrieves the details of a managed device using its unique identifier.

Note

You must have either the DeviceManagementManagedDevices.Read.All (Read Microsoft Intune devices) or DeviceManagementManagedDevices.ReadWrite.All (Read and write Microsoft Intune devices) permission to perform this action.

Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Managed Device ID

Enter the unique identifier of the managed device to retrieve its details.

Example:

705c034c-034c-705c-4c03-5c704c035c70

Text

Required

You can retrieve this using the action List Managed Devices.

Extra Params

Enter the OData query parameters to filter the response.

Key Value

Optional

Allowed keys:

count, expand, filter, format, orderby, search, select, skip, top

Action: List Managed Devices

This action lists the properties and relationships of all managed devices.

Note

You must have either the DeviceManagementManagedDevices.Read.All (Read Microsoft Intune devices) or DeviceManagementManagedDevices.ReadWrite.All (Read and write Microsoft Intune devices) permission to perform this action.

Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Extra Params

Enter the OData query parameters to filter the response.

Key Value

Optional

Allowed keys:

count, expand, filter, format, orderby, search, select, skip, top

Action: List Managed Devices by Name

This action retrieves managed devices that match the specified device name.

Note

You must have either the DeviceManagementManagedDevices.Read.All (Read Microsoft Intune devices) or DeviceManagementManagedDevices.ReadWrite.All (Read and write Microsoft Intune devices) permission to perform this action.

Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Device Name

Enter the name of the managed device to search for.

Example:

device-1234

Text

Required

You can retrieve this using the action List Managed Devices.

Extra Params

Enter the OData query parameters to filter the response.

Key Value

Optional

Allowed keys:

count, expand, filter, format, orderby, search, select, skip, top

Action: Locate Device

This action locates a managed device using its unique identifier.

Note

You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.

Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Managed Device ID

Enter the unique identifier of the managed device to locate it.

Example:

705c034c-034c-705c-4c03-5c704c035c70

Text

Required

You can retrieve this using the action List Managed Devices.

Action: Logout Shared Apple Device Active User

This action logs out the active user from a shared Apple device.

Note

You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.

Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Managed Device ID

Enter the unique identifier of the managed device to log out the active user.

Example:

705c034c-034c-705c-4c03-5c704c035c70

Text

Required

You can retrieve this using the action List Managed Devices.

Action: Reboot Device

This action immediately reboots a managed device.

Note

You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.

Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Managed Device ID

Enter the unique identifier of the managed device to reboot.

Example:

705c034c-034c-705c-4c03-5c704c035c70

Text

Required

You can retrieve this using the action List Managed Devices.

Action: Recover Device Passcode

This action recovers the passcode of a managed device.

Note

You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.

Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Managed Device ID

Enter the unique identifier of the managed device to initiate the passcode recovery.

Example:

705c034c-034c-705c-4c03-5c704c035c70

Text

Required

You can retrieve this using the action List Managed Devices.

Action: Remote Lock Device

This action remotely locks a managed device.

Note

You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.

Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Managed Device ID

Enter the unique identifier of the managed device to lock it remotely.

Example:

705c034c-034c-705c-4c03-5c704c035c70

Text

Required

You can retrieve this using the action List Managed Devices.

Action: Request Remote Assistance

This action requests remote assistance for a managed device.

Note

You must have the DeviceManagementManagedDevices.ReadWrite.All (Read and write Microsoft Intune devices) permission to perform this action.

Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Managed Device ID

Enter the unique identifier of the managed device to request remote assistance.

Example:

705c034c-034c-705c-4c03-5c704c035c70

Text

Required

You can retrieve this using the action List Managed Devices.

Action: Reset Device Passcode

This action resets the passcode of a managed device.

Note

You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.

Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Managed Device ID

Enter the unique identifier of the managed device to reset its passcode.

Example:

705c034c-034c-705c-4c03-5c704c035c70

Text

Required

You can retrieve this using the action List Managed Devices.

Action: Retire Device

This action retires a managed device, removing it from management while retaining user data.

Note

You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.

Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Managed Device ID

Enter the unique identifier of the managed device to retire it.

Example:

705c034c-034c-705c-4c03-5c704c035c70

Text

Required

You can retrieve this using the action List Managed Devices.

Action: Scan Windows Defender

This action scans a managed device using Windows Defender.

Note

You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.

Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Managed Device ID

Enter the unique identifier of the managed device to scan.

Example:

705c034c-034c-705c-4c03-5c704c035c70

Text

Required

You can retrieve this using the action List Managed Devices.

Quick Scan

Choose true for a quick scan. If you want a full system scan, choose false.

Boolean

Optional

Default value:

True

Action: Shut Down Device

This action shuts down a managed device.

Note

You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.

Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Managed Device ID

Enter the unique identifier of the managed device to shut it down.

Example:

705c034c-034c-705c-4c03-5c704c035c70

Text

Required

You can retrieve this using the action List Managed Devices.

Action: Sync Device

This action synchronizes a managed device with Intune to immediately apply pending configurations and policies.

Note

You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.

Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Managed Device ID

Enter the unique identifier of the managed device to sync.

Example:

705c034c-034c-705c-4c03-5c704c035c70

Text

Required

You can retrieve this using the action List Managed Devices.

Action: Update Windows Defender Signatures

This action updates Windows Defender signatures on a managed device.

Note

You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.

Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Managed Device ID

Enter the unique identifier of the managed device to update Windows Defender signatures.

Example:

705c034c-034c-705c-4c03-5c704c035c70

Text

Required

You can retrieve this using the action List Managed Devices.

Action: Update Windows Device Account

This action updates the Windows account of a managed device.

Note

You must have the DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permission to perform this action.

Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Managed Device ID

Enter the unique identifier of the managed device to update the account.

Example:

705c034c-034c-705c-4c03-5c704c035c70

Text

Required

You can retrieve this using the action List Managed Devices.

Password

Enter the new password for the device account.

Password

Required

Device Account Email

Enter the email associated with the device account.

Text

Required

Exchange Server

Enter the address of the Exchange server.

Text

Required

Session Initiation Protocol Address

Enter the session initiation protocol address for communication.

Text

Required

Password Rotation Enabled

Choose true to enable automatic password rotation.

Boolean

Optional

Default value:

false

Calendar Sync Enabled

Choose true to enable calendar synchronization.

Boolean

Optional

Default value:

false

Action: Wipe Device

This action wipes a managed device, removing all data and settings, and restores it to its factory default state.

Note

You must have both the DeviceManagementManagedDevices.ReadWrite.All (Read and write Microsoft Intune devices) and DeviceManagementManagedDevices.PrivilegedOperations.All (Perform user-impacting remote actions on Microsoft Intune devices) permissions to perform this action.

Permission type: Delegated (work or school account) or Application. Personal Microsoft accounts are not supported.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Managed Device ID

Enter the unique identifier of the managed device to wipe it.

Example:

705c034c-034c-705c-4c03-5c704c035c70

Text

Required

Keep Enrollment Data

Choose true to retain the enrollment data of the device after wiping.

Boolean

Optional

Default value:

true

Keep User Data

Choose true to retain user data when wiping the device.

Boolean

Optional

Default value:

true

macOS Unlock Code

Enter the unlock code required to unlock macOS devices.

Text

Optional

Persist eSIM Data Plan

Choose true to retain the eSIM data plan when wiping the device.

Boolean

Optional

Default value:

true

Action: Generic Action

This is a generic action used to make requests to any Microsoft Intune endpoint.

Action Input Parameters

Parameter

Description

Field Type

Required/Optional

Comments

Method

Enter the HTTP method to make the request.

Text

Required

Allowed values:

GET, PUT, POST, DELETE

Endpoint

Enter the endpoint to make the request to.

Example:

devicemanagement/manageddevices

Text

Required

Query Params

Enter the query parameters to pass to the API.

Key Value

Optional

Payload

Enter the payload to make the request.

Example:

$JSON[{"key_1": "value_1","key_2": "value_2"}]

Any

Optional

Extra Fields

Enter the extra fields to pass to the API.

Key Value

Optional

Allowed keys:

headers, payload_json, download, files, filename, retry_wait, retry_count, custom_output, response_type