User Guide

How to create a Microsoft Intune segment

Preview

Create a Microsoft Intune segment to discover managed iPhones, iPads, and Android devices and audit the ones you want to track in Inventory. Scans and audits run on an AlloyScan cloud worker by default. You can also run them through a local Audit Service.

Prerequisites

  • Site Administrator role in AlloyScan.
  • A Microsoft Intune tenant and an app registration in Microsoft Entra ID with the Microsoft Graph application permission DeviceManagementManagedDevices.Read.All. Grant admin consent for that permission.
  • The app registration's tenant ID, client ID, and an unexpired client secret.
  • For local execution, an Audit Service that can reach Microsoft Graph.

Create the segment

  1. Open Network > Segments and select + New segment.
  2. Select Microsoft Intune and select Next.
  3. Under Execution placement, keep AlloyScan cloud worker or select Local Audit service and choose an Audit Service.

  4. Enter a segment name. Under Platforms and Ownership, keep at least one option selected in each group. By default, iOS and iPadOS, Android, Corporate, and Personal are all selected. The Corporate filter also includes devices whose ownership Intune does not know.

    For example, if you select only Android and Corporate, the scan includes Android devices that Intune lists as corporate or whose ownership is unknown.

  5. For cloud execution, under Cloud credentials, select a Microsoft Intune credential or select Add to create one. For local execution, select a credential from the selected Audit Service.

  6. Select Test connection, which becomes available after you select a compatible credential. If the test fails, use the message to check the credential, Microsoft Graph permission and admin consent, or the Intune license before trying again.
  7. Create a scan schedule or continue without one, then review your settings and create the segment.

Verify

  1. Open the new segment in Network > Segments and select Scan.
  2. In Scan Results, select the devices marked Ready for audit, then select Audit.
  3. Open Inventory > Devices and look for the audited devices in the Apple mobile device groups or Android mobile devices.