---
sourceDocument: Yokohama ServiceNow AI Platform Capabilities
sourceDocumentLink: https://www.servicenow.com/docs/r/yokohama/servicenow-platform
Release :
- yokohama
ft:locale :
- en-US
ft:publication_title :
- Yokohama ServiceNow AI Platform Capabilities
ft:clusterId :
- platcap
bundleId :
- platcap
workflow :
- Platform
---
# Configure using SGC Central
# Configure Service Graph Connector for Microsoft Intune using SGC Central {#ariaid-title1}
* Release version: Yokohama
*
* Updated February 27, 2026
*
*  5 minutes to read
Use the playbook available with the SGC Central application to set up the Service Graph Connector for Microsoft Intune for pulling in Microsoft Intune data into the CMDB.
## Before you begin
Install Service Graph Connector for Microsoft Intune version 2.5.0 or later from the ServiceNow Store. For ServiceNow Store installation steps, see [Install a ServiceNow Store
application](https://www.servicenow.com/docs/access?context=t_InstallApplications&version=yokohama&pubname=yokohama-platform-administration&ft:locale=en-US).
Obtain the following information from your Microsoft Intune administrator:
* Client ID
* Client Secret
* Token URL
{#sgcc-configure-intune-integ__ul_ez5_l4d_3bc}
For the connector to access the data in Microsoft Intune, the credential information is required to use the Microsoft Graph API. Therefore, you must grant the following Graph API permissions from the App registrations page in the Microsoft portal:
* DeviceManagementManagedDevices.Read.All (Type: Application)
* DeviceManagementApps.Read.All (Type: Application)
* User.Read.All (Type: Application)
{#sgcc-configure-intune-integ__ul_tvp_d4w_bzb}
Dependencies and requirements:
* The [Integration Commons for CMDB](https://www.servicenow.com/docs/D5WmDWQQwWe_cmLk0Xi2sw "The Integration Commons for CMDB (sn_cmdb_int_util) store app contains the CMDB Integrations Dashboard and a set of Robust Transform Engine (RTE) transforms and script includes.") store app, which is automatically installed.
* The CMDB CI class models store app, which is automatically installed. See [CMDB CI Class Models](https://www.servicenow.com/docs/jKiNHAtfFcROnxyhyO4hJQ "The CMDB contains base-system classes that store data about configuration items (CIs). The CMDB CI Class Models ServiceNow Store app adds class models that extend the CMDB class hierarchy, including class descriptions, identification rules, identifier entries, and dependent relationships if applicable.").
* Datastream Action plugin (com.glide.hub.action_type.datastream), which is automatically installed.
* ITOM Licensing plugin (com.snc.itom.license). For more information, see [Request Discovery](https://www.servicenow.com/docs/access?context=t_ActivateTheDiscoveryPlugin&version=yokohama&pubname=yokohama-it-operations-management&ft:locale=en-US).
* ServiceNow IntegrationHub Zip step (com.glide.hub.action_step.zip), which is automatically installed.
* ServiceNow IntegrationHub JSON Parser step (com.glide.hub.action_step.jsonparser), which is automatically installed.
* The SGC Central application (sn_sgc_central), which is automatically installed.
{#sgcc-configure-intune-integ__ul_evf_gh1_wmb}
Role required: The following table shows the roles required for each stage of the playbook.{#sgcc-configure-intune-integ__table_zcy_w5p_4hc__entry__2}
| Stage | Role |
|-|-|
| Prerequisites | admin |
| Setup | SGC-Admin (sn_cmdb_int_util.sgc_admin) or admin |
[Table 1. Role required for each playbook stage]
{#sgcc-configure-intune-integ__table_zcy_w5p_4hc}
Note:
The admin user role is required to run background scripts, to provide access to global tables to the SGC-Admin user, and to configure advanced data sources. For information about the user roles for Service Graph Connectors, see [Service Graph Connector user roles](https://www.servicenow.com/docs/_TGfY39bTmS1jnrCEL6y0Q#cmdb-sgc-intro__section_ett_spp_4hc).
## About this task
The playbook experience for onboarding connectors is activated with SGC Central in the Service Graph Workspace or CMDB Workspace. To configure the SGC Central application, see [Configuring SGC Central](https://www.servicenow.com/docs/v3JtnHOfaTjWL4eWMTSQyA "Set up the SGC Central application for onboarding and maintaining Service Graph Connectors and monitoring the errors related to connections added using Service Graph Connectors.") and for more information on how to interact with a playbook, see [Interact with Playbook](https://www.servicenow.com/docs/access?context=playbook-ui&version=yokohama&pubname=yokohama-build-workflows&ft:locale=en-US).
For more details on permissions, see [Service Graph Connector for Microsoft Intune - Troubleshooting connection issues](https://community.servicenow.com/community?id=community_blog&sys_id=a405ef9bdbbd7018bb4a474d13961903) on ServiceNow Community and [Microsoft Graph permissions reference](https://learn.microsoft.com/en-us/graph/permissions-reference) on the Microsoft documentation site.
## Procedure
1. Use one of the following methods to open SGC Central:
* Navigate to WorkspacesService Graph Workspace, and from the left navigation panel, select the Ingestion icon ![]() to open the SGC Central view.
* Navigate to WorkspacesCMDB WorkspaceSGC Central.
{#sgcc-configure-intune-integ__choices_bd1_nrz_k3c}
2. On the Overview page, select Create connection.
Tip:
Alternatively, you can select Create connection on the All connections page.
3. On the Create connection window, select the Microsoft Intune connector type and then select Create connection.
4. Complete the initial prerequisites when setting up a connection for the first time using a connector.
Note:
This step is required only during the first-time setup. See [Perform initial setup tasks when creating a connection in SGC Central](https://www.servicenow.com/docs/w5ZZk3LTh8No7aHAE6tFeQ "Complete the prerequisites for setting up a connection for the first time using a Service Graph Connector within the SGC Central view of the Service Graph Workspace or CMDB Workspace.").
5. Select the data source type.
1. In the Setup stage of the playbook, select the Select data source type activity.
2. Select a data source type:
* Advanced data sources: Advanced data sources offer faster data import and better performance, and include software publisher details. Select this option if you have a large number of Microsoft Intune devices.
Note:
* The admin role is required to configure advanced data sources.
* To enable the creation of attachments, the glide.attachment.extensions system property must be set to either null or `zip, json`.
For more information, see the [Service Graph Connector For Microsoft Intune -- Advanced \[KB1641546\]](https://support.servicenow.com/kb_view.do?sysparm_article=KB1641546) article in the Now Support Knowledge Base.
{#sgcc-configure-intune-integ__ul_m1m_4qy_ygc}
* Regular data sources: The standard option, which doesn't include software publisher details.
{#sgcc-configure-intune-integ__ul_ldm_4tm_ygc} {#sgcc-configure-intune-integ__substep_vrc_r5m_ygc}
{#sgcc-configure-intune-integ__substep_vrc_r5m_ygc}
3. Select Continue.
{#sgcc-configure-intune-integ__substeps_zmk_zsm_ygc}
6. Enter connection details and test the API connection for importing Microsoft Intune data.
1. In the Setup stage of the playbook, select the Create and test connection activity.
2. On the form, fill in the fields.
{#sgcc-configure-intune-integ__table_l2g_zn4_nyb__entry__2}
| Field | Description |
|:-|:-|
| Connection Name | Name to identify the Microsoft Intune connection record. For example, SG-Intune connection. |
| Connection URL | Base URL to connect to your Microsoft Intune application. Based on the region of your Microsoft Intune application, enter the connection URL in one of the following formats: * Global https://graph.microsoft.com * US Government https://graph.microsoft.us * China https://microsoftgraph.chinacloudapi.cn * Germany https://graph.cloudapi.de/ {#sgcc-configure-intune-integ__ul_brk_244_nyb} |
| OAuth Client ID | Client ID of the Microsoft Intune application as noted in the [Before you begin](https://www.servicenow.com/docs/NyqsFia3mbcgvoQ1g8JLEQ#sgcc-configure-intune-integ__prereq) section. |
| OAuth Client Secret | Client secret of the Microsoft Intune application as noted in the [Before you begin](https://www.servicenow.com/docs/NyqsFia3mbcgvoQ1g8JLEQ#sgcc-configure-intune-integ__prereq) section. |
| OAuth Token URL | Callback URL for the Microsoft Intune application. Based on the region of your Microsoft Intune application, enter the token URL in one of the following formats: * Global https://login.microsoftonline.com/<tenantid>/oauth2/v2.0/token * US Government https://login.microsoftonline.us/<tenantid>/oauth2/v2.0/token * China https://login.partner.microsoftonline.cn/<tenantid>/oauth2/v2.0/token * Germany https://login.microsoftonline.de/<tenantid>/oauth2/v2.0/token {#sgcc-configure-intune-integ__ul_h5y_p44_nyb}Where <tenantid> is the tenant ID of your Microsoft Intune application. |
| Use MID server | Option to use the MID Server for connecting to the Microsoft Intune instance. Note: A MID Server is required only if a direct connection between the ServiceNow and Microsoft Intune instances isn't possible. |
| Mid Selection | MID Server for the connection. This field appears only when you select the Use MID Server check box. |
[Table 2. Create and test connection form]
{#sgcc-configure-intune-integ__table_l2g_zn4_nyb}
3. Select Create and test connection.
4. Once the connection test is complete, select Continue.
{#sgcc-configure-intune-integ__substeps_p1l_fnb_gcc}
7. Configure the connection properties to enable the connector to access resources.
1. In the Setup stage of the playbook, select the Configure properties activity.
2. In the Configure properties section, update the connection properties for advanced and regular data sources if required.
3. Select Continue.
{#sgcc-configure-intune-integ__substeps_qtd_j5m_ygc}
8. Configure the report trigger job for advanced data sources.
The Activate report trigger job activity appears only if you selected Advanced data sources in step [5.b](https://www.servicenow.com/docs/NyqsFia3mbcgvoQ1g8JLEQ#sgcc-configure-intune-integ__substep_vrc_r5m_ygc). The advanced data sources require device reports and software reports to be triggered in the Microsoft environment before related jobs and scheduled imports are run.
1. In the Setup stage of the playbook, select the Activate report trigger job activity.
2. Fill in the fields on the Scheduled Script Execution form.
{#sgcc-configure-intune-integ__table_mtv_tg4_ygc__entry__2}
| Field | Description |
|:-|:-|
| Name | Specify a name for the report trigger job. |
| Active | Select this check box to activate the report trigger job. |
| Run | Specify the schedule for the job to be run. |
| Time | Specify the time when the job should run. |
| Run as | Specify the user role required to run the report trigger job. |
[Table 3. Scheduled Script Execution form]
{#sgcc-configure-intune-integ__table_mtv_tg4_ygc}
Note:
After you configure the report trigger job, all related jobs and the device and software reports scheduled imports are automatically scheduled to run in a specific sequence a few hours later (typically 3--4 hours). You can review the scheduled imports that are already activated and their scheduled time in step [9](https://www.servicenow.com/docs/NyqsFia3mbcgvoQ1g8JLEQ#sgcc-configure-intune-integ__step_dbq_wws_ygc).
3. Select Continue.
{#sgcc-configure-intune-integ__substeps_lmn_k5m_ygc}
9. Configure the import schedule to import data at regular intervals.
1. In the Setup stage of the playbook, select the Configure import schedule activity.
2. Expand the Parent scheduled data import within the Import schedules list to select the Connection Name-SG-Intune Devices import schedule.
3. Select the Active check box, and then fill in the run schedule and time details.
For more information, see [Schedule a data import](https://www.servicenow.com/docs/access?context=t_ScheduleADataImport&version=yokohama&pubname=yokohama-integrate-applications&ft:locale=en-US#table_r53_5hm_xp).
4. Select Save.
Alternatively, select Execute Now to execute the import schedule immediately.
5. Select Continue.
{#sgcc-configure-intune-integ__substeps_lf4_yvw_fcc} {#sgcc-configure-intune-integ__step_dbq_wws_ygc}
{#sgcc-configure-intune-integ__step_dbq_wws_ygc}
10. In the Setup stage of the playbook, select the Confirm connection setup activity to verify whether the connection was configured.
## What to do next
Select View all connections to review the connection details. The configured connection appears in the Installed connections list.
**Related concepts**
* [Service Graph Connector for Microsoft Intune](https://www.servicenow.com/docs/hDuN0AEavOWIy4zUfRD7IQ "Use the Service Graph Connector for Microsoft Intune to pull data from the Microsoft Intune application into your ServiceNow instance.")
* [Accessing the connection details of Service Graph Connector for Microsoft Intune](https://www.servicenow.com/docs/WZJYMPNEoPObUYu0nPlnMA#sgc-cmdb-intune-conn "You can access the connection details of the Service Graph Connector for Microsoft Intune in a single view using the common connection framework (CCF) included within the Integration Commons for CMDB (sn_cmdb_int_util) store app.")
**Related reference**
* [CMDB classes targeted in Service Graph Connector for Microsoft Intune](https://www.servicenow.com/docs/H57e9v6NE9bhhNofVZzJtw "When you complete setting up the connection, you can configure the integration to periodically pull data from Microsoft Intune. The data from the regular data sources (SG-Intune Computer, SG-Intune Devices, and SG-Intune Software) and the advanced data sources (SG-Intune Device Reports and SG-Intune Software Reports) is saved in tables that extend from the Configuration item [cmdb_ci] table.")
*[\>]: and then