Connect Robin to Microsoft Intune so it can check device compliance and help resolve common endpoint issues on managed devices, without you having to open the Intune admin center yourself. Microsoft Intune is managed through Microsoft Graph - Microsoft's own documentation below covers how app access and Intune groups work under the hood.
- How to Use Microsoft Entra ID to Access Intune APIs in Microsoft Graph - Microsoft's guide to registering the app and granting the Intune device-management scope in Microsoft Graph.
- Use groups to organize users and devices for Microsoft Intune - why Intune requires Microsoft Entra security groups (not Microsoft 365 groups) for app and policy assignment.
Before you begin
| Requirement | Details |
|---|---|
| Permissions | Full admin access |
| Prerequisite | Microsoft 365 & Entra must already be connected in Product integrations. Microsoft Intune uses the same Microsoft Graph permissions granted for that connection - see How it works. |
Connect Microsoft Intune
If you manage more than one customer, use Manage integrations for at the top of the page to select the customer you are configuring before you start.
To connect Robin to Microsoft Intune:
- Go to Product integrations.
-
On the Discover tab, select the Microsoft Intune card.
- Automatically create groups is on by default. Leave it on to let Atera create a matching Entra security group for each app assignment when one doesn't already exist, or turn it off to manage groups yourself.
-
In Group name template (optional), enter a naming pattern. It must include the
{AppName}placeholder - for example,{AppName}-software-group. Leave it blank and Atera applies its own default. - Select Connect.
Verify the connection
The Microsoft Intune card shows a green checkmark on its logo, and the integration moves to the Active tab. Robin can now use Intune data to help resolve device compliance issues.
Change your Intune settings
To change the configuration or disconnect Intune:
- Go to Product integrations, then open the Active tab.
- Hover over the Microsoft Intune card, select the three-dots menu, then select Manage.
- Update Automatically create groups or Group name template (optional), then select Save changes. Atera confirms with a "Microsoft Intune settings saved" message.
- To remove the integration, select Disconnect - either from the card menu or at the bottom left of the manage screen - then confirm in the dialog.
How it works
- Microsoft Intune is managed through Microsoft Graph, using the same Azure AD (Entra) app registration and permissions already granted when you connected Microsoft 365 & Entra - including the device management scope Intune needs. You don't create a separate app registration or enter new credentials to connect Intune. For the full list of permissions Atera requests, see Understanding Microsoft Entra ID Integration Permissions.
- The group Atera creates for software assignment is an Entra security group. Microsoft Intune only supports security-enabled groups for app and policy assignment - a regular Microsoft 365 group won't work.
Troubleshooting
| Problem | Cause | Solution |
|---|---|---|
| Connect is greyed out | Microsoft 365 & Entra isn't connected yet. The modal shows an Action required banner. | Go to Product integrations, connect Microsoft 365 & Entra, then return to Microsoft Intune. |
| Group name template shows an error | The template doesn't include {AppName}. |
Add {AppName} to the template - for example, {AppName}-software-group. |
| Software isn't reaching the devices you expect | The matching Entra group isn't security-enabled, or wasn't created. | In Microsoft Entra, confirm the group type is Security, and that its name matches your template. |
Related articles
- AI Center: Identity Provider (IdP) integrations
- Understanding Microsoft Entra ID Integration Permissions
- Sync users and contacts from Microsoft Entra ID
