TeamDynamix Intune Integration

The Microsoft Intune integration allows TeamDynamix administrators to set up a connection to Intune and automatically sync asset data into TeamDynamix. Once assets are created using this integration, technicians can open those assets in Intune or take other actions on the synced assets, and users can report on data synced from MS Intune.  

This article covers the following topics:

• Setting up the Intune integration
• Syncing assets to TeamDynamix 
• Working with assets from Intune in TDNext 
• Actions on Intune devices

Setting up the Intune integration 

The Intune integration can be configured in the Integrations page of an Asset application or in the global Organization Settings > Integrations page. Follow these steps to set up the integration: 

1. Navigate to the Integrations page in an asset application (TDAdmin > Applications > [Asset Application] > Integrations) or as a global administrator (TDAdmin > Organization Settings > Integrations). 
2. Click +New to create a new integration. 
3. Set the Integration Type to Microsoft Intune (if you're in the asset application, this will be the only option).
4. Choose a Name. 
5. Set the Application (this will be automatically set when configuring the integration from within the Assets/CIs application).
6. Choose whether to Create Assets. If this is checked, the integration will create new asset records based on managed devices. If unchecked, it will add Intune information to existing devices, but will not create any new ones. 
7. Choose an Asset Matching Mode. See the Matching Logic section below for details on the Asset Matching Mode. 
8. Choose a Form and Status for the assets created by Intune. These values will be used when new assets are created, but will not be updated on existing assets. 
9. Choose a setting for Use External Product Model.
   1. When checked, assets will be created using the selected Product Type and will use the Model field in Intune as the Product Model (creating new Product Models in TeamDynamix if there is no match). 
   2. When unchecked, a Default Product Model can be selected. If it is, that product model will be used for assets created by the integration. If omitted, no Product Model will be applied. 
10. Choose a setting for Set Owner or Set User checkboxes. When the asset user in Intune can be matched to a TeamDynamix user they will be set as the Owner or User in TeamDynamix based on these settings. 
11. Set the Azure Tenant ID, Client ID, and Client Secret to connect to Intune.

    1. The asset sync features in the Intune integration uses an app registration with the Application API permission DeviceManagementManagedDevices.Read.All (not as a Delegated permission). 

       1. Note: The Client Secret field requires the client secret value, not it's ID.
    2. The managed action features (added in TeamDynamix version 121.) require the additional permissions DeviceManagementManagedDevices.ReadWrite.All and DeviceManagementManagedDevices.PrivilegedOperations.All. You will need to grant Admin Consent through the application. For organizations setting up the integration for the first time after version 12.1, DeviceManagementManagedDevices.ReadWrite.All includes all the permissions required to import devices in DeviceManagementManagedDevices.Read.All and you do not need to separately grant that permission. 

Syncing assets to TeamDynamix 

Assets are automatically generated and updated by the Intune integration when it is initially configured and kept in sync by a nightly update. Whether the integration creates assets and how it matches assets to Intune devices is controlled by the Asset Matching setting. The following options are available: 

• Create Assets - The integration will create new assets, matching by serial number or Microsoft Intune ID. If there is a conflict where the serial number is matched, but the Microsoft Intune ID does not match, a new asset will be created.
• Match by Serial Number and set Microsoft Intune ID - The integration will create new assets when there is no match by serial number. If there is a match by serial number, the Microsoft Intune ID will be set on the existing asset, and no new asset will be created.
• Match by Microsoft Intune ID - The integration will create new assets when there is no match by Microsoft Intune ID. If there is a match by Microsoft Intune ID, the existing asset will be updated, and no new asset will be created.
• None - The integration will only update existing assets, and the Default Form, Default Status and Default Product Model fields will be ignored.

Matching Logic

The integration matches assets in the TeamDynamix database by looking for a matching value on the following fields:

1. Intune Device ID- If an asset is found where the Intune Device ID in Intune matches the Intune Device ID in TeamDynamix, it will be updated with any new values from Intune. All new assets created by this integration will have the Intune Device ID set automatically. 
2. Serial Number - If no matching Intune ID is found, the integration will look for an asset with a matching Serial Number and update that asset. 

The matching rules work as follows:

• If the Serial Number and Intune Device ID match, the asset will be updated
  • This would be the most common match, when an asset that is in Intune has been previously updated by this integration. 
• If the Serial Number matches and Intune Device ID is different, a new asset will be created 
  • This would occur when records in Intune are using a generic or blank serial number.
• If the Serial Number matches and Intune Device ID is blank, update the asset and set the Intune Device ID
  • This would occur when the asset was already created in TeamDynamix through another process, and links the existing asset record to the Intune record. 
• If the Serial Number does not match or is empty and Intune Device ID does match, update the asset and set the Serial Number
  • This would occur when a serial number has changed in Intune on an asset that was previously synced.
• If there is no match on Serial Number or Intune Device ID, create a new asset
  • This would occur when a new asset is added to Intune.  

Working with assets from Intune in TDNext

When viewing an asset from Intune in TDNext, users can view detailed information from Intune in the asset's Discovered Data tab. The Open in Intune button allows the user to open the asset directly in Intune (subject to the user's permissions in Intune). 

The data in the Discovered Data tab is also available in the Assets report source. The following fields are mapped from Intune to TDX. The Intune Field column refers to the field as defined in the Intune managedDevice resource type. 

Intune managed device actions

If you grant the additional permissions described above, the integration will allow technicians in TeamDynamix to take actions on devices in Intune. Because Microsoft does not provide a separate permission that can be granted for each action a user may take on a device, TeamDynamix administrators can control which actions are available to technicians in their environment based on the asset application's security role. To edit the security role, follow these steps: 

1. Navigate to the asset application's security roles (TDAdmin > Applications > [Asset Application] > Users & Roles > Security Roles). 
2.  Open the security role to be edited. 
3. Add appropriate actions from the Microsoft Intune section in the security role.
4. Save. 

The following actions are supported in the Intune integration