Match Devices From Entra to Intune to Autopilot

The question it answers: Which devices exist in Entra ID, Intune and Autopilot, and which are missing from one of them?

Note

Entra devices are matched to Intune devices by Entra device id, and to Autopilot records by serial number (or the Entra device id the record points to). The Found In column shows where each device exists.

At a glance

Where in the app	Intune › Devices › Match Entra, Intune & Autopilot Devices
Workload	Intune
Kind	Table
Data	Built from the tenant data IntensiveReports keeps in memory and refreshes in the background, so it opens at once.
Licence	Microsoft Intune.
Report id (API and MCP)	intune.utils.connect-entra-devices-intune-autopilot

Columns

Column	Key	Type
OS	OperatingSystem	Text
Display Name	DisplayName	Text
Found In	FoundIn	Text
Object ID	ObjectId	Text
Entra Device ID	EntraDeviceId	Text
Intune Id	IntuneId	Text
Serial Number	SerialNumber	Text
Primary User Display Name	PrimaryUserDisplayName	Text
Primary User UPN	PrimaryUserUpn	Text
Registered In Autopilot	RegisteredInAutopilot	YesNo

What it needs

Licence: Microsoft Intune.

Application permissions on the IntensiveReports app registration (all permissions):

Permission	API	What it allows	Note
Device.Read.All	Microsoft Graph	Read all devices
User.Read.All	Microsoft Graph	Read all users’ full profiles
DeviceManagementManagedDevices.Read.All	Microsoft Graph	Read Microsoft Intune devices
DeviceManagementServiceConfig.Read.All	Microsoft Graph	Read Microsoft Intune configuration

Data sources it reads

• GET /v1.0/devices?$select=...&$expand=registeredOwners($select=id,userPrincipalName)
• GET /v1.0/devices?$select=id,deviceId&$expand=registeredUsers($select=id,userPrincipalName)
• GET /beta/deviceManagement/managedDevices
• GET /v1.0/deviceManagement/windowsAutopilotDeviceIdentities

Through the API and MCP

GET /ir-api/v1/reports/intune.utils.connect-entra-devices-intune-autopilot?size=100

An AI assistant reads it with the MCP tool get_report and the id intune.utils.connect-entra-devices-intune-autopilot. The client needs the Read grant for Intune. See Using the API.