Intune - documentation and backup. Part 2

 App Registration

First, we create an App registration in Entra ID.

Navigate to Entra ID > Manage > App registrations.
Click on "New registration" and fill in Name and Supported account types.

On the page for the App (IntuneManagement) go to “API permissions” blade.
Add a permission > Microsoft Graph > Application permissions.

Add the following API permissions as shown in the following example.
Then do “Grant admin consent for ….”.

Permissions

Agreement.ReadWrite.All

Application.Read.All

CloudPC.ReadWrite.All

DeviceManagementApps.ReadWrite.All

DeviceManagementConfiguration.ReadWrite.All

DeviceManagementManagedDevices.ReadWrite.All

DeviceManagementRBAC.ReadWrite.All

DeviceManagementScripts.ReadWrite.All

DeviceManagementServiceConfig.ReadWrite.All

Group.ReadWrite.All

Organization.ReadWrite.All

Policy.Read.All

Policy.ReadWrite.ConditionalAccess

User.ReadWrite.All

Next, we will create a Client secret.
On “Certificates & secrets” blade, choose “Client secrets" and then “+ New client secret”.

Take note of the “Value” when creating the secret, we will need this. After creation the Value is hidden.

Now, we have prepared the App registration.
In the next step, I will create a Resource group for the tool to manage cost and resources.
Also, I will create a Storage Account to hold tool files and backup/documentation.