Microsoft Intune Inspector Summary
Summary
| Property | Value |
|---|---|
| Production Status | Preview |
| Category | Endpoint |
| Discovers | One child launchpoint per Customer tenant reachable through an active GDAP relationship |
Description
Inspects a Microsoft Intune tenant through Microsoft Graph, surfacing managed device inventory, compliance state, configuration profiles, managed apps, App Protection Policies, Autopilot deployment profiles, and Conditional Access policies.
Asset Mapping: Each Customer's Intune tenant maps tenant identity and domain, total and per-OS managed device counts, compliance, encryption, and ownership counts, and policy, app, Autopilot, and Conditional Access counts into Asset Inventory (Asset Type: Endpoint Management).
Data View Information
Parent Overview Table
The Parent performs Customer tenant discovery only and doesn't collect tenant data tables. It reports the number of GDAP Customer tenants discovered (see Metrics).
Parent Data Tab Headers
- None
Child Overview Table
- Summary
- Tenant Name
- Tenant Domain
- Total Managed Devices
- Compliant Devices
- Non-Compliant Devices
- Encrypted Devices
- Devices by OS
- Total Compliance Policies
- Total Configuration Profiles
- Total Managed Apps
- Conditional Access Policies (Enabled)
Child Data Tab Headers
- Summary
- Managed Devices
- Compliance Policies
- Configuration Profiles
- Apps
- App Protection Policies
- Autopilot
- Autopilot Devices
- Non-Compliant Devices
- Conditional Access
- Software Updates
Metrics
| Metric | Description |
|---|---|
| Microsoft Intune: Managed Customer Count (Parent) | Number of GDAP Customer tenants discovered by the parent run. |
| Microsoft Intune: Total Managed Devices | Total Intune-managed devices in the tenant. |
| Microsoft Intune: Compliant Device Count | Devices currently in compliance. |
| Microsoft Intune: Non-Compliant Device Count | Devices currently out of compliance. |
| Microsoft Intune: Encrypted Device Count | Devices reporting disk encryption enabled. |
| Microsoft Intune: Windows Device Count | Windows devices under management. |
| Microsoft Intune: iOS/iPadOS Device Count | Apple mobile devices under management. |
| Microsoft Intune: Android Device Count | Android devices under management. |
| Microsoft Intune: macOS Device Count | Mac devices under management. |
| Microsoft Intune: Compliance Policy Count | Total compliance policies defined in the tenant. |
| Microsoft Intune: Configuration Profile Count | Total configuration profiles (legacy and Settings Catalog) defined. |
| Microsoft Intune: Managed App Count | Total apps published in the Intune app catalog. |
| Microsoft Intune: App Protection Policy Count | Total MAM/App Protection Policies defined. |
| Microsoft Intune: Autopilot Profile Count | Total Windows Autopilot deployment profiles defined. |
| Microsoft Intune: Autopilot Registered Device Count | Hardware devices registered for Autopilot deployment. |
| Microsoft Intune: Conditional Access Policy Count (Enabled) | Active Conditional Access policies. |
| Microsoft Intune: Intune License Present | Whether the tenant's Intune license is active. |
Actionable Alerts
All rules ship turned off. Turn on the ones you want under Admin > Actionable Alerts.
| Rule | Trigger | Severity |
|---|---|---|
| Device compliance count dropped | The number of compliant devices decreased since the last run. | High |
| Non-compliant device count increased | The number of non-compliant devices increased since the last run. | High |
| Intune license lapsed | The tenant's Intune license status changed from active. | High |
| Conditional Access policy count changed | The number of enabled Conditional Access policies changed. | High |
| Conditional Access policy disabled | The number of enabled Conditional Access policies decreased (a policy moved to disabled or report-only). | High |
| Encrypted device count dropped | The number of encrypted devices decreased since the last run. | High |
| Managed device count changed | The total number of managed devices changed since the last run. | Medium |
| Compliance policy added or removed | The number of compliance policies changed. | Medium |
| Configuration profile added or removed | The number of configuration profiles changed. | Medium |
| App Protection Policy added or removed | The number of App Protection Policies changed. | Medium |
| Autopilot profile added or removed | The number of Autopilot deployment profiles changed. | Medium |
| Managed customer added or removed (Parent) | The number of GDAP Customer tenants discovered by the Parent changed. | Medium |
| Managed app catalog changed | The number of apps in the Intune app catalog changed. | Low |
| Autopilot device registered | The number of Autopilot-registered devices increased. | Low |
Updated 3 days ago
Did this page help you?