Connecting Your Intune Tenant
After creating your trial, you need to authorize Robopack to work with your Intune tenant. This grants the permissions Robopack needs to read and write apps, manage groups, and read device information.
Video Walkthrough
What you'll need
- A completed Robopack trial setup
- A Global Administrator account in your Entra ID environment
Step-by-Step Guide
1. Navigate to Settings > Tenants
In the Robopack dashboard, go to Settings in the left menu, then click Tenants. You'll see your Intune tenant listed, but it's only connected for user-level actions — Robopack can't yet perform background automation.
2. Click Authorize
Click the Authorize button to grant Robopack the permissions it needs for background automation (packaging, patching, importing apps).
3. Sign in and accept the permissions
Choose your Global Admin account and review the permissions Robopack is requesting:
| Permission | Purpose |
|---|---|
| Read and write Intune apps | Import and manage app packages in Intune |
| Read and write groups | Create Entra ID security groups for app assignments |
| Read Intune devices | Monitor deployment status across your device estate |
Click Accept to grant these permissions.
4. Verify the connection
Robopack will test the connection to your tenant to confirm all permissions are in place. Once complete, you'll see a green authorization indicator in the top-right of the tenant box.
Verify in Entra ID (optional)
You can confirm the permissions in the Entra portal:
- Go to Entra Portal > Applications > Enterprise Applications
- Find the Robopack entry
- Click Permissions to see all granted permissions
Permissions Reference
Core permissions (required)
| Permission | Type | Purpose |
|---|---|---|
Organization.Read.All | Delegated | Read organisation information |
DeviceManagementApps.ReadWrite.All | Application | Read and write Intune apps |
DeviceManagementConfiguration.Read.All | Application | Read Intune device configuration |
Group.ReadWrite.All | Application | Create and manage Entra ID groups for assignments |
Optional permissions (for advanced features)
| Permission | Type | Feature |
|---|---|---|
Device.Read.All | Application | Radar Tracking — scan devices |
DeviceManagementManagedDevices.Read.All | Application | Radar Tracking — read managed device info |
If you connect using the User-based method instead of Admin Consent, features like Robopatch and background automation will not be available. We recommend using Admin Consent for full functionality.
What's next?
Your tenant is connected. Now let's deploy your first app from the Instant Apps library.