/
Logical Architecture of Microsoft Intune Importer for JSM Assets

Logical Architecture of Microsoft Intune Importer for JSM Assets

Microsoft Intune Importer for JSM Assets runs on the Forge Platform, which provides:

  • Serverless Computing Platform

  • REST API Interfaces

  • Secure Hosted Storage

  • Scheduling Capability

  • Audit and Debug Logging

 

Screenshot 2026-06-20 at 22.51.43.png

 

 

 

It is located in the same AWS region as the JSM Sites of our customers.

Integration with Microsoft Intune is read-only and one-way via the Microsoft Graph API v1.0.

Required Azure AD Permissions

The Azure AD app registration requires Application (not Delegated) permissions on Microsoft Graph. The required permissions depend on which object types you import:

Permission

Required for

Permission

Required for

DeviceManagementManagedDevices.Read.All

Managed Devices, Applications, Users, Manufacturers, Models, Operating Systems, Operating System Versions, Device Categories — required for all imports

DeviceManagementServiceConfig.Read.All

Autopilot Devices (optional)

DeviceManagementConfiguration.Read.All

Autopilot Devices (optional)

Endpoint Analytics: No additional Graph API permission is needed. However, an active Microsoft Endpoint Analytics license must be assigned to your tenant to import Endpoint Analytics data (available from v6.15.0).