Connecting Your Intune Tenant
After creating your trial, you need to authorize Robopack to work with your Intune tenant. This grants the permissions Robopack needs to read and write apps, manage groups, and read device information.
If your security policy does not allow consenting to third-party multi-tenant enterprise apps, you can connect with your own app registration instead.
Video Walkthrough
What you'll need
- A completed Robopack trial setup
- A Global Administrator account in your Entra ID environment
Step-by-Step Guide
1. Navigate to Settings > Tenants
In the Robopack dashboard, go to Settings in the left menu, then click Tenants. You'll see your Intune tenant listed, but it's only connected for user-level actions — Robopack can't yet perform background automation.
2. Click Authorize
Click the Authorize button to grant Robopack the permissions it needs for background automation (packaging, patching, importing apps).
3. Sign in and accept the permissions
Choose your Global Admin account and review the permissions Robopack is requesting:
| Permission | Purpose |
|---|---|
| Read and write Intune apps | Import and manage app packages in Intune |
| Read and write groups | Create Entra ID security groups for app assignments |
| Read Intune devices | Monitor deployment status across your device estate |
Click Accept to grant these permissions.
4. Verify the connection
Robopack will test the connection to your tenant to confirm all permissions are in place. Once complete, you'll see a green authorization indicator in the top-right of the tenant box.
Verify in Entra ID (optional)
You can confirm the permissions in the Entra portal:
- Go to Entra Portal > Applications > Enterprise Applications
- Find the Robopack entry
- Click Permissions to see all granted permissions
Permissions Reference
Core permissions (required)
| Permission | Type | Purpose |
|---|---|---|
Organization.Read.All | Delegated | Read organisation information |
DeviceManagementApps.ReadWrite.All | Application | Read and write Intune apps |
DeviceManagementConfiguration.Read.All | Application | Read Intune device configuration |
Group.ReadWrite.All | Application | Create and manage Entra ID groups for assignments |
Feature permissions
These are granted alongside the core permissions. Each one is required for the feature listed — without it, that feature does not work.
| Permission | Type | Feature |
|---|---|---|
Device.Read.All | Application | Radar Tracking — scan devices |
DeviceManagementManagedDevices.Read.All | Application | Radar Tracking — read managed device info |
DeviceManagementServiceConfig.ReadWrite.All | Application | Robopatch — update apps set as required in Autopilot Enrollment Status Page profiles |
AdministrativeUnit.Read.All | Application | Connecting with an Administrative Unit: list the units a tenant can be scoped to |
If you connect using the User-based method instead of Admin Consent, features like Robopatch and background automation will not be available. We recommend using Admin Consent for full functionality.
What's next?
Your tenant is connected. Now let's deploy your first app from the Instant Apps library.