Workspace
Tenants
Connect customer Microsoft Entra tenants with read-only Intune permissions. Each tenant keeps its own configuration history, baselines and findings.
No tenants connected yet
The consent flow is the next build slice. You will generate a link, the customer admin approves read-only Microsoft Graph permissions, and the tenant appears here with a connection health check.
What will be collected
Configuration policies
Settings catalog, device configuration, compliance and endpoint security policies with assignments.
Change history
Property-level snapshots, first/last observed timestamps and readable before/after differences.
Drift and evidence
Approved baselines, explainable findings, reviewer notes and exportable evidence bundles.
Read-only by design
The collector uses application permissions to read configuration. It never creates, edits, assigns, deletes or remediates anything in the customer tenant. The exact permission list is shown before consent and recorded against the connection.