Return
-
Title
Microsoft inTune configuration -
Description
Unable to configure intunes get forbidden message -
Cause
Error related with the setting of account permissions in Azure rather than application permissions. They look very similar in the UI, however if the incorrect permissions are set you can see this error. -
Resolution
Referring to page 18 in the Quick Start Guide, in step 8 under "Minimum permissions, rights, and roles required for Microsoft Intune" it covers setting the application level permissions in Microsoft Graph for us to access Intune from GPOADmin,
All of step 8 must be done for the Application level, not the account, for us to operate correctly. After this is done the API permissions must be granted to GPOADmin. This easily be confusing, please let me know if you or the customer have any issues getting this set.
Correct permissions
Incorrect permissions