Advanced configurations overview
The pages in this section describe optional configuration. BI for Intune is fully usable without any of it — the dashboards in the Setup Guide cover everything Microsoft Graph exposes natively.
These add-ons unlock dashboards that depend on data sources Microsoft does not return through the Graph API. If you skip them, the rest of the product still works. The dashboards that depend on them simply show no data.
What each add-on enables
Section titled “What each add-on enables”Windows Update for Business Reports
Section titled “Windows Update for Business Reports”Windows Update for Business reports is a Microsoft cloud service that surfaces Windows update compliance for Microsoft Entra joined devices. Microsoft writes this data into a Log Analytics workspace that you own. Connecting BI for Intune to that Log Analytics workspace populates the following dashboards:
- WUfB Quality Updates
- WUfB Feature Updates
- WUfB Driver Updates
- WUfB Delivery Optimization
- WUfB Windows Readiness
See Set up Windows Update for Business reports to enable this.
Enhanced Inventory
Section titled “Enhanced Inventory”Enhanced Inventory is a PowerShell-based collection pipeline that gathers device facts Intune doesn’t track natively. The scripts run on your fleet and write data into a Log Analytics workspace, where BI for Intune reads it back. Enhanced Inventory populates the following dashboards:
- Firewall Status
- App Inventory
- Driver Inventory
- Microsoft 365
- Monitor
- Disk
- Battery
- Warranty
The current install path uses the Azure Monitor Logs Ingestion API (DCR-based) and is set up via a one-click ARM template. Existing customers using the older HTTP Data Collector API can migrate; see Migrate to Log Ingestion API under Administration.
One Log Analytics workspace serves both
Section titled “One Log Analytics workspace serves both”If you set up both add-ons, point them at the same Log Analytics workspace. BI for Intune reads both Windows Update for Business Reports data and Enhanced Inventory data from one workspace.
Other optional configuration
Section titled “Other optional configuration”These pages aren’t add-ons — they tune behavior of the core sync. None of them are required, but each one is worth knowing about:
- Export API Parameter — bypass the PowerStacks redirect API by setting the Intune Export URL directly. More secure and avoids a network round-trip through PowerStacks infrastructure.
- Cloud PC Export API Parameter — equivalent of the above, for Windows 365 (Cloud PC) data. Only needed if you use Cloud PC.
- Enable Maps — turn on Azure Maps integration so device locations render on a map visualization. Requires an Azure Maps account.