Edit the Azure AD Application Registration
Copy the URL link to this section to share
Before you can collect custom inventory data from Windows 10 devices you must add the permissions required to read Log Analytics data to the Azure AD application registration.
These steps might have been performed when originally creating the Azure AD App Registration. If so you can skip this step when configuring the Windows 10 custom inventory steps.
Prerequisites: The user performing this step requires Global Admin and Subscription Admin rights.
Step
- Login to portal.azure.com or entra.microsoft.com using a global administrator account.
- Search for and select App registrations.
- Select your BI for Intune App registration. (Note: The name of your may vary from what is in this doc.)
Step
- On the Enterprise App page select API Permissions.
Step
- Select Add a permission.
Step
- Select APIs my organization uses.
Step
- Search for Log Analytics.
- Select Log Analytics API.
Step
- Select Application Permissions.
Step
- Select Data.Read.
- Select Add permissions.
Step
- Select Grant admin consent for <your company name>.
Step
- Select Yes at the prompt.
- You have now completed the steps required.
