Setting Up the Microsoft Intune Connector

Note: Currently only a Customer (1 to 1) Connector can be established in the platform. 

Tip: If you have created a Microsoft Entra Connector, you can use the same credentials for the Microsoft Intune Connector for the same customer. 

Prerequisites

Before setting up the connector, ensure you have:

• A Microsoft account with Application Administrator or Higher (such as Global Admin) role permissions for your Azure tenant

Step 1: Log in to the Azure Portal

1. Go to: https://portal.azure.com
2. Open Microsoft Entra ID
3. Select "App registrations"
4. Select "New registration" 

Step 2: Register the Application 

1. Enter the following values:

Name:
Paratira - Connector - Entra & Intune

Supported account types:
Accounts in this organizational directory only (Single tenant)

Redirect URI (Web):
https://paratira.ai

Select "Register".

Step 3: Record the Client ID

Record the following information after selecting register above, to be inputted into the Paratira Platform later.

Application (Client) ID

Step 4: Create a Client Secret 

1. Go to "Certificates & secrets".
2. Select "New client secret".
3. Choose an expiration period.

Important policy note:
Select the longest lifetime permitted by your organisation’s security policy.
When the secret expires, the connector will stop functioning until the secret is rotated, so ensure secret expiry monitoring and renewal processes are in place.

1. Select "Add".

1. Copy the Client Secret value immediately and store it securely. The value cannot be retrieved once you leave the page.
2. You will need to input the Client Secret into the Paratira Platform later.

Step 5: Add Required API Permissions 

Microsoft Graph - Application permissions:

• AuditLog.Read.All
• Device.Read.All
• DeviceManagementManagedDevices.Read.All
• Directory.Read.All
• Organization.Read.All
• Reports.Read.All
• SecurityEvents.Read.All
• TeamworkDevice.Read.All
• User.Read.All

Microsoft Graph - Delegated permissions:

• User.Read

Select "Grant admin consent" and save after adding the permissions.

Step 6: Identify the Tenant ID 

1. Go to: https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/Overview
2. Copy the Tenant ID to be inputted into the Paratira Platform later.

Step 7: Log into the Paratira Platform 

1. Go to: https://app.paratira.ai
2. Ensure Customer Impersonation

The screenshot below shows where you can check that you are correctly "Managing" or "Impersonating" the customer profile you wish to setup the connector for:  

Navigate to Settings in the left menu

Expand the menu and select Connectors

Click the Add Connector button

The screenshot below shows the location of the Add Connector button:

Choose the Intune Connector

Enter the details in Paratira

Enter the following details to complete the onboarding process in Paratira:

• Name: Enter a name for the connector e.g. Intune Connector
• Client ID: Enter the details you created in Step 3
• Client Secret: Enter the details you created in Step 4
• Tenant ID: Enter the details you identified in Step 6

1. Click Add New Mapping
2. Enter the Tenant ID that you copied earlier and the select the customer that you want to associate the connector with
3. Click Add
4. Once all details have been entered a new icon will appear called "Test Connection"
5. Paratira will load the Validation Results and process the API endpoints associated and validate the data permissions have been configured correctly. This process can take few minutes to complete
6. Once the permissions are completed click Next to proceed

Should you have any issues, feel free to reach out to: sanjay.subramaniam@raioam.com