→ Upcoming Keynote Event - Introducing Lansweeper's 2023 Spring Release: 'Duvel' - Learn More

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Lansweeper Tech Support
Lansweeper Tech Support
Scanning mobile devices from Intune with a Microsoft Cloud Services Credential is a feature introduced in Lansweeper 8.3. You will need to update your installation if you are running a lower Lansweeper version.

In Lansweeper version 8.3, we introduced the Microsoft Cloud Service credential, which can be used to scan Intune. This credential makes full use of Modern Authentication and the Microsoft Graph API, using application permissions.

With an Intune V2 scanning target you'll be able to scan Android, iOS (iPhone and iPad) and Windows Phone mobile devices enrolled in Intune.


To scan mobile devices from Intune with a Microsoft Cloud Services Credential, make sure that:

  • You've already set up your Microsoft Cloud Services application.
  • You're in possession of your Microsoft Cloud Services application's Application (client) ID, Directory (tenant) ID, and Client secret or certificate. These are obtained when creating the application.

Add permissions to the Microsoft Graph application to scan Intune data

  1. Open your company's Azure portal and navigate to App registrations. 
  2. Select the app you've already created and select the API permissions tab in the left-hand menu.
  3. On the API permissions page, click Add permission and select Microsoft Graph from the API list.  
  4. As we are setting up the Microsoft Graph API to enforce modern authentication, you will need to add Application permissions. Start by selecting Application permissions.
  5. Add the DeviceManagementManagedDevices.Read.All API permission and select Save. This permission is required to scan your Intune data.
  6. Admin consent must still be granted. Select Grant admin consent for <organization> and click Grant in the resulting pop-up.

    The added permissions should now show Granted for <organization>.

Set up Lansweeper to scan your Intune data

Add a Microsoft Cloud Service credential

  1. In the Lansweeper web console, navigate to the Scanning > Scanning credentials.
  2. In the Credentials tab, select Add new Credential.
  3. Select Microsoft Cloud Service as a credential type, and fill in the name, Application ID and Directory ID. Application ID and Directory ID are obtained when creating the Microsoft Cloud Services application.
  4. If a Client secret is selected, add the client secret (obtained when creating the MS Graph app in Azure).

    If a Certificate thumbprint is selected, add the certificate thumbprint which is obtained when creating the MS Graph app in Azure.
  5. Optionally, add a new scanning target from this pop-up. Select the designated checkboxes and click OK. The corresponding scanning target will be created.
    When multiple scanning targets are selected, ensure that the app has sufficient API permissions to scan the selected scanning targets.

Add an Intune scanning target

  1. In the Lansweeper web console, navigate to the Scanning > Scanning targets.
  2. In the Scanning Targets tab, select Add Scanning Target.
  3. Select Microsoft 365 as a target type.
    Scan intune Classic 1.png
  4. Enter a target name, and select a credential to assign to the scanning target.
    Alternatively, create a new Microsoft Cloud Service credential.
  5. Enter a description, and select the scanning schedule for the target.
  6. Select Ok.
Was this article helpful? Yes No
No ratings

New to Lansweeper?

Try Lansweeper For Free

Test Drive Lansweeper Yourself. Explore our interactive Demo or sign up for free 14-day trial.

Try Now
Knowledge Base Dashboard
Article Dashboard
Version history
Last update:
‎02-22-2023 11:03 AM
Updated by: