---
title: Microsoft Intune Setup (via Azure App Registration)
slug: discovery-app-req-guide/microsoft-intune-setup-via-azure-app-registration
createdAt: 2026-11-05T06:10:29.776Z
---

To import Microsoft Intune objects into the CMDB, the Intune discovery must be configured using an Azure App Registration with the required Microsoft Graph permissions.

**Note**: Azure VM operating system discovery is performed through the Discovery App using the standard Windows/Linux/Unix authentication methods listed in the Authentication Requirements table.

1. Go to https\://portal.azure.com/#blade/Microsoft\_AAD\_RegisteredApps/ApplicationsListBlade  and create a new App Registration and note down the below details from Overview

- **Client ID** (Required in Ivanti Neurons for Service Mapping to add Azure Credentials)
- **Tenant ID** (Required in Ivanti Neurons for Service Mapping to add Azure Credentials)
- **Secret Key-Value** (Needs to be created from Certificates & Secrets) (Required in Ivanti Neurons for Service Mapping to add Azure Credentials)

2. Assign Microsoft Graph permissions for Intune

- App registration → API permissions → Add a permission → Microsoft Graph
- Add the required permission(s) to read Intune devices (For example, Intune device read scope).
- Click **Grant admin consent** after adding permissions