Integration · Security and identity
AI agents for Microsoft Intune
See the laptops and phones Microsoft Intune manages.
- Actions
- 8
- Read
- 3
- Write
- 5
Actions
What your agents can do in Microsoft Intune
See the laptops and phones Microsoft Intune manages: find devices by person, name, operating system or compliance, read one device's details and the compliance policies, and act on a device: sync it, restart or lock it, retire it (remove company data) or wipe it to factory settings. Signed in as an Intune admin.
Read 3
Look things up. Nothing changes.
Find devices
Lists managed devices, optionally only one person's (user, their sign-in name), only non-compliant ones, or any OData filter.
Get a device
Reads one managed device by its Intune ID: everything Find devices returns, plus imei, meid, wiFiMacAddress, totalStorageSpaceInBytes, freeStorageSpaceInBytes, phoneNumber, deviceEnrollmentType.
List compliance policies
Lists the device compliance policies (what a device must meet to count as compliant).
Write 5
Create, change or send.
Sync a device
Asks a device to check in with Intune now, so it picks up new policies and apps and reports its compliance again.
Restart a device
Restarts a device right away (Windows, iOS and iPadOS supervised devices, macOS); the person using it may lose unsaved work.
Lock a device
Locks a lost or stolen phone or tablet's screen remotely; the person unlocks it with their passcode.
Retire a deviceDeletes data
Removes company data, apps, email profiles and settings from a device and stops managing it, leaving the person's own data.
Wipe a deviceDeletes data
Resets a device to factory settings, erasing all its data (keep_user_data keeps a Windows user's files; keep_enrollment_data keeps it enrolled).
A person can approve first
Any write action can be set to wait for a person's approval before it runs, so an agent asks before it changes anything. Actions that delete data ask first by default.
Connection
How it connects
Connect it once in the console, then give it to the agents and workflows that need it.
Sign in with Microsoft and approve access (OAuth).
Kept safe
- Credentials are stored encrypted with your organization's own keys.
- They are opened only by the process that makes the call, at the moment it runs, and never go into a prompt or the browser.
- Calls go only to the tool's own servers.
Ideas
Ideas to start with
Starting points made only from the actions above. Mix them with any other tool your agents can use.
- 01
Ask about your Microsoft Intune data
Ask a question in plain words. The agent can find devices, get a device or list compliance policies in Microsoft Intune, then answers with what it found.
- 02
Let an agent update Microsoft Intune
Have the agent restart a device or lock a device in Microsoft Intune as part of a larger task. Turn on approval and a person signs off on each change first.
- 03
Share what it finds in Slack
Give one agent Microsoft Intune and Slack: it can find devices in Microsoft Intune and post a summary to a Slack channel in the same run.
Works well with
More Security and identity tools
- Okta14 actionsFind people and read their groups, apps, MFA factors and sign-in history in Okta, list groups and members, and run joiner and leaver steps.
- Microsoft Entra ID10 actionsFind people and groups in Microsoft Entra ID (formerly Azure Active Directory), read a person's group and role memberships and their sign-in log, add or remove group members, and run leaver and incident steps.
- Google Workspace Admin9 actionsManage people and groups in a Google Workspace domain.
- CrowdStrike Falcon8 actionsInvestigate and respond in CrowdStrike Falcon: search the hosts the Falcon sensor protects and read their details, network-contain a compromised host or lift containment, search and read alerts.
- Wiz7 actionsWork cloud security issues in Wiz: list open issues by severity or type, read one issue with the affected resource and its notes, move it to in progress, resolve or reject it with a reason, add a note.
- Vanta8 actionsTrack compliance in Vanta: see which automated tests are failing and the exact resources (users, buckets, laptops, repos) causing it, progress on each framework.
FAQ
Microsoft Intune and MyDeepAgents
Can MyDeepAgents connect to Microsoft Intune?
Yes. The Microsoft Intune connector has 8 actions: 3 read and 5 make changes. Your agents can call them as tools, and your workflows can run them as steps.
How do I connect Microsoft Intune?
Sign in with Microsoft and approve access (OAuth). Credentials are stored encrypted with your organization's own keys and are opened only at the moment of a call.
Can an agent change data in Microsoft Intune without asking?
Only if you let it. Each of the 5 actions that change data can be set to wait for a person's approval before it runs, and the 2 that delete data ask first by default.
Can I use Microsoft Intune in workflows as well as agents?
Yes. Every Microsoft Intune action also works as a step in a workflow, and the same connection serves your agents and your workflows.
Early access
Put Microsoft Intune to work
Connect it in a few minutes, give an agent the actions it needs, and decide which changes wait for a person.