Skip to content
CapaSystems Docs

Setup Intune Permissions for CustomApps Upload

To upload a CapaOne CustomApp to Intune, you will need to set up the required permissions in Intune. In this guide, we will show you how to achieve this.

Before you get started

Section titled “Before you get started”

Make sure you have an Azure AD Integration setup in Intune and CapaOne. If not, you can follow this guide on how to set up the Integration: Integrate CapaOne with Entra ID

Configure Intune Permissions

Section titled “Configure Intune Permissions”

  1. Log in to the Azure Portal

  2. Navigate to App Registrations

    • In the left menu, select Azure Active Directory
    • Click on App registrations

  3. Select or Create an Application

    • Choose an existing app registration, or
    • Click New registration to create a new app

image-20251030-072245.png

  1. Configure API Permissions

    • In your app registration, go to Manage > API permissions
    • Click Add a permission

image-20251030-072706.png

  1. Add Required Intune Permissions

    • Select Microsoft Graph

    • Choose Application permissions

    • Search for and add the following permissions:

      • Organization.Read.All
      • DeviceManagementApps.ReadWrite.All
      • DeviceManagementConfiguration.ReadWrite.All
      • DeviceManagementServiceConfig.ReadWrite.All

image-20251030-073006.png

  1. Grant Admin Consent

    • After adding permissions, click Grant admin consent for your organization.

image-20251030-073311.png

  1. Verify Permissions

    • Ensure the permissions are listed and show as “Granted for [Your Organization]“

Your App Permissions Should look like this

Section titled “Your App Permissions Should look like this”

image-20260121-141656.png

Additional Resources

Section titled “Additional Resources”