This article describes the device attributes Elisity enriches from the Microsoft Intune connector and how to use them in policy.
The Microsoft Intune connector enriches devices discovered by Elisity with management and classification data from your Intune tenant. Cloud Control Center matches each discovered device to its Intune record and surfaces the resulting attributes in IdentityGraph, where the attributes indicated below can be used as Policy Group match criteria.
Device Matching and Enrichment
When a new device is discovered by any of Elisity's methods, Cloud Control Center queries Microsoft Intune for a matching record using the following parameters, in order, until a match is found:
- MAC + IP address
- MAC address
Engage Elisity support to modify this query order.
Cloud Control Center re-queries Intune every 24 hours to check for updated device attributes. You can refresh a device on demand using the refresh button next to Microsoft Intune in the Trust Attributes section of the device's IdentityGraph view. Devices learned by Elisity before the connector was configured are automatically scheduled for enrichment on the next 24-hour cycle, based on their attachment timestamp.
Attribute Mapping
The Microsoft Intune connector retrieves the following device attributes from the Microsoft Graph API (GET /deviceManagement/managedDevices). These attributes are surfaced on the device's IdentityGraph tab, and the attributes indicated below can be used as Policy Group match criteria.
| Intune API Attribute | Elisity Attribute | Core Effective Attribute | Policy Group Match Criteria |
|---|---|---|---|
| id | Intune Device ID | — | — |
| azureADDeviceId | Azure AD Device ID | — | Yes |
| operatingSystem | Operating System | Yes | Yes |
| complianceState | Compliance State | — | Yes |
| osVersion | OS Version | — | Yes |
| azureADRegistered | Azure AD Registered | — | Yes |
| deviceRegistrationState | Device Registration State | — | Yes |
| model | Model | Yes | Yes |
| manufacturer | Vendor | Yes | Yes |
| serialNumber | Serial Number | — | Yes |
| managedDeviceOwnerType | Ownership | — | Yes |
The Ownership attribute reflects the device's management ownership as reported by Intune (managedDeviceOwnerType) and resolves to one of three values:
- Corporate — the device is company-owned.
- Personal — the device is personally owned (BYOD).
- Unknown — Intune has not recorded an ownership type for the device.
Because Ownership is available as a Policy Group match criterion, administrators can build dynamic Policy Groups that distinguish corporate-owned devices from personally owned (BYOD) devices within a shared Intune tenant. For example, you can combine the Known in Microsoft Intune trust attribute with Ownership = Corporate for a full-access Policy Group, and scope a separate, more restricted Policy Group to Ownership = Personal.