Filtering Intune SGC imports to phones (=handheld computing devices) only

[davidetting]

Hi everyone,

I'm currently trying to limit Microsoft Intune imports via Service Graph Connector to phones / handheld computing devices only and exclude laptops, desktops, and other managed endpoints.

So far I've tried several approaches:

• ETL filtering, but I eventually got stuck in what felt like a parent/child CI class enable/disable loop and couldn't find the right combination of classes and mappings. I ended up resetting the configuration.
• Modifying Robust Transform Engine scripts, including the Before Script, but unfortunately without success. For this approach the exact naming conventions are quite challenging.

Has anyone solved this (or a similar requirement) before?

What approach worked best for you?

My current thinking is that the most maintainable solution would be to leverage ServiceNow's OOTB device classification logic and filter based on what ServiceNow already considers a phone/mobile device.

Alternatively, filtering on OS families such as:

• iOS
• iPadOS
• Android

could also be an option.

I'm trying to avoid heavy customizations and would prefer an upgrade-safe/OOTB-friendly solution if possible.

Any insights, lessons learned, or examples would be greatly appreciated.

Thanks!

[shubhamseth]

@davidetting I would like to understand which data source you are using for Intune Service Graph Connector? 

[davidetting]

We are using Microsoft Intune as the source system and Microsoft Graph API as the underlying data source used by the Service Graph Connector.

[shubhamseth]

@davidetting there are two data sources 

regular and advance data source 

if you want to filter some data then you should create script include by extending OOB script include method and make your change in that. This way you will be able to filter your data as per requirements and at the same time it would be upgrade safe in future. Since you are not modifying anything OOB. 

I saw one of your latest comment that you found solution to modify the RTE script - this is not best solution or recommended because you are going to modify OOB and this will create challanges during your upgrade or if any new version comes for Intune SGC. This will fail for sure. Moreover still you are pulling everything from

source into your staging table even the data which you do not want so better not to pull the data itself which is not needed using above option. 

[Will O]

I might be missing something or oversimplifying things, but wouldn't it just be running the SG-Intune Devices scheduled job and disabling the SG-Intune Computers job? 

Microsoft Intune • Australia ServiceNow AI Platform Capabilities • Docs | ServiceNow