Intune - documentation and backup. Part 2

 App Registration

First, we create an App registration in Entra ID.

Navigate to Entra ID > Manage > App registrations.
Click on "New registration" and fill in Name and Supported account types.

On the page for the App (IntuneManagement) go to “API permissions” blade.
Add a permission > Microsoft Graph > Application permissions.

Add the following API permissions as shown in the following example.
Then do “Grant admin consent for ….”.

Permissions

Agreement.ReadWrite.All

Application.Read.All

CloudPC.ReadWrite.All

DeviceManagementApps.ReadWrite.All

DeviceManagementConfiguration.ReadWrite.All

DeviceManagementManagedDevices.ReadWrite.All

DeviceManagementRBAC.ReadWrite.All

DeviceManagementScripts.ReadWrite.All

DeviceManagementServiceConfig.ReadWrite.All

Group.ReadWrite.All

Organization.ReadWrite.All

Policy.Read.All

Policy.ReadWrite.ConditionalAccess

User.ReadWrite.All

Next, we will create a Client secret.
On “Certificates & secrets” blade, choose “Client secrets" and then “+ New client secret”.

Take note of the “Value” when creating the secret, we will need this. After creation the Value is hidden.

Now, we have prepared the App registration.
In the next step, I will create a Resource group for the tool to manage cost and resources.
Also, I will create a Storage Account to hold tool files and backup/documentation.

Intune - documentation and backup. Part 1

Working for customers, I had a need to make documentation to my work in Intune.
Using Word and Snipping Tool did the job, but it was time consuming, and the document had to be updated every time some changes was made in Intune.

Then I discovered "Intune Management" by Micke-K
Micke-K/IntuneManagement: Copy, export, import, delete, document and compare policies and profiles in Intune and Azure with PowerShell script and WPF UI. Import ADMX files and registry settings with ADMX ingestion. View and edit PowerShell script.

With his tool I could easily create documentation, and even export settings to JSON files as backup.

When starting the app and logging in, some permissions are required and must be approved.

Then the GUI is ready. From here, you can export, import and do documentation.

This is a great tool.
But there is more.... you can automate it, and run it on a schedule.

I will like to schedule, run and store backup and documentation in Azure. Without any use of onprem.
But this setup can easily be modified to run on an onprem server and storage.

During this serie of blogs, I will walk you through the Azure setup, like App Registration, Resource Group, Storage Account, Automation Account and script.

How this can give some inspiration.