Hi everyone,
We have set up the Microsoft Intune Spoke. Connection is working and we are able to get managed devices.
Only problem is : we are not getting all managed devices.
We double-checked the permissions in Azure with those listed in the ServiceNow documentation, and every one is there (Set up the Microsoft Intune spoke). Also updated the spoke plugin, but the result is the same.
Using the "Get Managed Device" flow designer action, we get this error message from the Microsoft graph API : Resource does not contain a tag allowed by the current role.
From that error, we found that adding the "Default" tag (or scope tag) to the device in Intune enabled us to get it from ServiceNow. Now we don't really want to add that Default tag to every device in Intune because that would defeat the purpose of having custom tags to limit what certain groups of users can see.
From what we found we can assign roles to users in Intune, but since this integration is done with a registered application we don't have an actual user account in Intune.
Is it possible to do this or are there other permissions we need to add to the registered application in Azure?
If someone has worked on this before, your help is greatly appreciated.
Thanks!
Eric
