Skip to content
All integrations

Endpoint Security integration

Vectis + Microsoft Intune.

Already included in M365 Business Premium — Vectis surfaces Intune device compliance state next to every customer's ticket queue and backup jobs without an additional app registration.

PlannedAdvertised; dedicated adapter on the registry roadmap. The generic webhook receiver covers the gap until the named connector lands.

What Vectis syncs

The read side of the adapter.

Vectis syncs every device enrolled in Microsoft Intune — device name, OS platform and version, enrollment date, the primary user's UPN, and current compliance state. Compliance state covers the full Intune enum: Compliant, Non-compliant, In grace period, Not applicable, and Unknown. The customer hub shows a donut chart with a non-compliant device list sorted by oldest last-sync first.

What you can do

The write side of the adapter.

Intune compliance data in Phase 340 is read-only. The customer hub shows a compliance donut and a non-compliant device table with the user and last-sync timestamp. Device write actions (retire, wipe, sync) require additional permissions and will be added in a future phase.

Honest about the limits

What we don’t do, and why.

The M365 publisher app must have DeviceManagementManagedDevices.Read.All and DeviceManagementConfiguration.Read.All granted for the Intune toggle to work. Tenants without an Intune license (Microsoft 365 Business Premium, Microsoft 365 E3, or EMS E3+) will show a 'not licensed' state. Compliance policies must be assigned in the customer's Intune tenant for devices to show a Compliant or Non-compliant state; unmanaged or policy-less devices show Unknown.

How it correlates

One customer, every tool.

Microsoft Intune on the customer account hub alongside every other system you run — not a standalone dashboard. A few of the most common shapes this takes:

No additional app registration

Intune uses the same publisher app as the M365 connector. Enable the Intune feature toggle on any connected M365 tenant and Vectis starts syncing device compliance — no extra Entra app, no additional secrets.

Compliance posture next to endpoint security

Intune's compliance state appears on the same integrations tab as Defender alerts and RMM patch data, giving you the full device-health picture in one scroll.

Setup snapshot

What connecting looks like.

Step 1: Open the Vectis publisher app in Entra admin center (portal.azure.com → Entra ID → App registrations). Step 2: Under API Permissions, add Microsoft Graph → Application permissions: DeviceManagementManagedDevices.Read.All and DeviceManagementConfiguration.Read.All. Grant admin consent. Step 3: In Vectis, open the customer hub → Integrations tab → Microsoft 365 card → Manage features. Toggle Microsoft Intune device compliance on and save. Vectis syncs device compliance on the next 30-minute cycle.

# In the Vectis hub, add the connector:
category  Endpoint Security
vendor    Microsoft Intune
status    Planned

Read the full setup guide

Other Endpoint Security integrations

Evaluating Microsoft Intune against the alternatives?

Pricing

Microsoft Intune is available on every Vectis tier — $299/mo and up. See pricing

Also reachable over MCP — bring your own client → /mcp

Try Vectis with Microsoft Intune.

30-day free trial. Connect Microsoft Intune at signup. See every customer with their full context on day one. Month-to-month, cancel anytime.
Vectis + Microsoft Intune Integration | Unified Workspace for MSPs | Vectis