Intune - documentation and backup. Part 3

Storage Account

In part 3 of the "Intune - documentation and backup" series, I will first create a Resource group to hold all resources, and to track cost.
After that, I will go on to create the Storage account that will hold all files.

Resource Group

Create a Resource group.
Select your Subscription. Fill in with a Resource group name, and then select your Region.

I will create a Resource Group "RG-BBJ-IntuneMgmt" in West Europe.

Storage Account

I will create a Storage Account with the following configuration:

Configuration	Value
Basics
Storage account name	sabbjintunemgmt
Resource group	RG-BBJ-IntuneMgmt
Region	(Europe) West Europe
Primary service	Azure Blob Storage or Azure Data Lake Storage
Performance	Standard (general-purpose v2)
Redundancy	LRS
Advanced
Access tier	Cool
Networking
Public network access	Enable
Public network access scope	Enable from all networks
Routing preference	Microsoft network routing
Security
Require secure transfer for REST API operaions	Enabled
Enable storage account key access	Enabled
Minimum TLS version	Version 1.2
Permitted scope for copy operations	From any storage account
Encryption
Encryption type	Microsoft-managed keys (MMK)

In Access Control (IAM) add  a role assignment.

Select “Reader” and assign access to Managed identity, and select the Automation Account as member.

 

 

 

 

Also add the Automation Account to role assignment “Storage Account Key Operator Service Role”.

In this Storage Account, I will create 3 Classic File Shares:

Share name	Value
backup	This will contain Backup data from Intune
documentation	This share will contain versions of the Intune Documentation created at runtime.
intunemanagement	This share contains the tool IntuneManagement and it must be copied to this share.

Next step is to get "IntuneManagement" and prepare it.