Set Up Intune Permissions for CustomApps Upload

To upload a CapaOne Company App to Intune, the Entra ID application that CapaOne uses needs Intune permissions in Microsoft Graph. This guide shows you how to add them.

Before you start

• The tenant must have an active Intune subscription.
• You need an Entra ID integration in CapaOne. When you upload a Company App to Intune, you select the integration whose Entra ID application has the Intune permissions. If you don’t have an integration yet, see Integrate CapaOne with Entra ID.

Configure Intune permissions

1. Log in to the Azure portal

   • Navigate to https://portal.azure.com/ and log in to your account.

2. Navigate to App registrations

   • In the left menu, select Microsoft Entra ID.
   • Click App registrations.

3. Select the application

   • Open the app registration that your CapaOne Entra ID integration uses.
   • If you create a new app registration instead, also create an Entra ID integration for it in CapaOne.

4. Configure API permissions

   • In your app registration, go to Manage > API permissions
   • Click Add a permission

5. Add the required Intune permissions

   • Select Microsoft Graph

   • Choose Application permissions

   • Search for and add the following permissions:

     • Organization.Read.All
     • DeviceManagementApps.ReadWrite.All
     • DeviceManagementConfiguration.ReadWrite.All
     • DeviceManagementServiceConfig.ReadWrite.All

6. Grant admin consent

   • After adding permissions, click Grant admin consent for your organization.

7. Verify the permissions

   • Ensure the permissions are listed and show as “Granted for [Your Organization]”

If a permission is missing

CapaOne checks the permissions when you upload. If a permission is missing, the upload fails with a message that starts with Missing required permission: followed by the name of the permission, for example DeviceManagementApps.ReadWrite.All. Add the permission, grant admin consent, and upload again. This message also appears if the tenant has no active Intune subscription.

Additional resources

• Upload a Company App to Intune
• Microsoft: Permissions reference for Microsoft Graph