No additional app registration
Intune uses the same publisher app as the M365 connector. Enable the Intune feature toggle on any connected M365 tenant and Vectis starts syncing device compliance — no extra Entra app, no additional secrets.
Endpoint Security integration
Already included in M365 Business Premium — Vectis surfaces Intune device compliance state next to every customer's ticket queue and backup jobs without an additional app registration.
What Vectis syncs
Vectis syncs every device enrolled in Microsoft Intune — device name, OS platform and version, enrollment date, the primary user's UPN, and current compliance state. Compliance state covers the full Intune enum: Compliant, Non-compliant, In grace period, Not applicable, and Unknown. The customer hub shows a donut chart with a non-compliant device list sorted by oldest last-sync first.
What you can do
Intune compliance data in Phase 340 is read-only. The customer hub shows a compliance donut and a non-compliant device table with the user and last-sync timestamp. Device write actions (retire, wipe, sync) require additional permissions and will be added in a future phase.
Honest about the limits
The M365 publisher app must have DeviceManagementManagedDevices.Read.All and DeviceManagementConfiguration.Read.All granted for the Intune toggle to work. Tenants without an Intune license (Microsoft 365 Business Premium, Microsoft 365 E3, or EMS E3+) will show a 'not licensed' state. Compliance policies must be assigned in the customer's Intune tenant for devices to show a Compliant or Non-compliant state; unmanaged or policy-less devices show Unknown.
How it correlates
Microsoft Intune on the customer account hub alongside every other system you run — not a standalone dashboard. A few of the most common shapes this takes:
Intune uses the same publisher app as the M365 connector. Enable the Intune feature toggle on any connected M365 tenant and Vectis starts syncing device compliance — no extra Entra app, no additional secrets.
Intune's compliance state appears on the same integrations tab as Defender alerts and RMM patch data, giving you the full device-health picture in one scroll.
Setup snapshot
Step 1: Open the Vectis publisher app in Entra admin center (portal.azure.com → Entra ID → App registrations). Step 2: Under API Permissions, add Microsoft Graph → Application permissions: DeviceManagementManagedDevices.Read.All and DeviceManagementConfiguration.Read.All. Grant admin consent. Step 3: In Vectis, open the customer hub → Integrations tab → Microsoft 365 card → Manage features. Toggle Microsoft Intune device compliance on and save. Vectis syncs device compliance on the next 30-minute cycle.
# In the Vectis hub, add the connector:
category Endpoint Security
vendor Microsoft Intune
status PlannedOther Endpoint Security integrations
Pricing
Microsoft Intune is available on every Vectis tier — $299/mo and up. See pricing
Also reachable over MCP — bring your own client → /mcp