> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://support.atomicwork.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://support.atomicwork.com/_mcp/server.

# Microsoft Intune

## Microsoft Intune: Permissions and setup

### Permissions

To connect your Atomicwork and Microsoft Intune accounts, you need:

* **Atomicwork admin access**: You need org admin access in Atomicwork.
* [**Microsoft Entra access.**](https://support.atomicwork.com/integrations/identity-access-management/azure-ad)

| **Permission**                                          | **Usecase**                                                                                             |
| ------------------------------------------------------- | ------------------------------------------------------------------------------------------------------- |
| User.Read.All                                           | Required to pull user device information                                                                |
| DeviceManagementApps.ReadWrite.All                      | Required to read assignments and write assignments against users                                        |
| Group.ReadWrite.All                                     | Required for a skill/AI workflow - to install apps on user devices                                      |
| DeviceManagementManagedDevices.PrivilegedOperations.All | Required for critical remote operations involving user devices like ‘Erase data’ and remote lock action |
| DeviceManagementManagedDevices.Read.All                 | Required to read all the device information                                                             |
| DeviceManagementManagedDevices.ReadWrite.All            | Required for operations involving user devices like ‘Erase data’ and remote lock action                 |

### Setup

* As an Atomicwork admin, go to **Settings > Enterprise integrations > App store > Microsoft Intune,** and click **Connect**.
* Click **Enable** to access a page that displays the permissions Atomicwork needs to successfully leverage the integration.
* Click **Accept.**

Atomicwork automatically ingests the full set of Microsoft Intune device attributes such as device hardware, OS and compliance state, enrollment status, last check-in, installed software, network configuration, and user assignment.

Admins do not need to manually select Intune fields or map remote Intune fields to Atomicwork attributes.

---