Try It
Print

Edit the Azure AD Application Registration

Copy the URL link to this section to share

Before you can collect custom inventory data from Windows 10 devices you must add the permissions required to read Log Analytics data to the Azure AD application registration.

These steps might have been performed when originally creating the Azure AD App Registration. If so you can skip this step when configuring the Windows 10 custom inventory steps. 

Prerequisites:  The user performing this step requires Global Admin and Subscription Admin rights.

Step

  1. Login to portal.azure.com or entra.microsoft.com  using a global administrator account.
  2. Search for and select App registrations.
  3. Select your BI for Intune App registration. (Note: The name of your may vary from what is in this doc.)
(click to enlarge)
Step

  1. On the Enterprise App page select API Permissions.
(click to enlarge)
Step

  1. Select Add a permission.
(click to enlarge)
Step

  1. Select APIs my organization uses.
(click to enlarge)
Step

  1. Search for Log Analytics.
  2. Select Log Analytics API.
(click to enlarge)
Step

  1. Select Application Permissions.
(click to enlarge)
Step

  1. Select Data.Read.
  2. Select Add permissions.
(click to enlarge)
Step

  1. Select Grant admin consent for <your company name>.
(click to enlarge)
Step

  1. Select Yes at the prompt. 
  2. You have now completed the steps required. 
(click to enlarge)