Set up a telecom expense management service in Intune

Applies to: Intune in the Azure portal
Looking for documentation about Intune in the classic portal? Go here.

Intune enables you to manage telecom expenses incurred from data usage on corporate-owned mobile devices. To enable this capability, Intune has integrated with the third-party software developer Saaswedo’s Datalert telecom expense management solution. Datalert is real-time telecom expense management software that lets you manage telecom data usage and avoid costly and unexpected data and roaming overages for your Intune-managed devices.

Intune's integration with Datalert enables you to centrally set, monitor and enforce roaming and domestic data usage limits by using automated alerts when the limits exceed defined thresholds. You can configure the service to apply different actions to individuals or groups of end users, including disabling roaming, when users exceed the threshold. Reports that provide data usage and monitoring information are available from the Datalert management console.

The following diagram shows how Intune integrates with Datalert.

Diagram of Intune and Datalert integration

Before you can use the Datalert service with Intune, you need to configure settings in the Datalert console and in Intune. The connection must be turned on for the Datalert service and for Intune. If the Datalert side of the connection is enabled, but not the Intune side, Intune receives the communication, but ignores it.

Supported platforms

  • Samsung Knox
  • iOS 8.0 and later

Prerequisites

  • A subscription to Microsoft Intune, and access to the Azure portal.
  • A subscription to the Datalert telecom expense management service

List of telecom expense management providers

Intune currently integrates with the following telecom expense management providers:

Saaswedo Datalert telecom expense management service

Deploy the Intune and Datalert integrated solution

Before you start, make sure that you already have an Intune and a Datalert telecom expense management service subscription.

Step 1: Connect the Datalert service to Microsoft Intune

  1. Sign into the Datalert management console with your administrator credentials.

  2. On the Datalert management console, go to the Settings tab, and then to MDM configuration.

  3. Select Unblock to enable you to enter the settings on the page.

  4. For Server MDM, choose Microsoft Intune.

  5. For Azure AD domain, enter your Azure tenant ID, and then select the Connection button.

    Selecting Connection makes the Datalert service check in with Intune to ensure that there are no pre-existing Datalert connections with Intune. After a few seconds, a Microsoft log-in page appears, followed by the Datalert Azure authentication.

  6. On the Microsoft authentication page, select Accept. You are redirected to a Datalert “thank you” page, which closes after a few seconds. Datalert validates the connection, and displays green check marks beside a list of items that it validated. If the validation fails, you see a message in red. If this happens, contact Datalert Support for help.

    The following screenshot shows the green check marks that you can expect to see once the connection is successful.

    Datalert page showing connection successful

Step 2: Check that the telecom expense management feature is Active in Intune

After you complete Step 1 above, your connection should be automatically enabled, and a connection status of Active should be showing in the Azure portal. These steps show you how to check for the Active status.

  1. Sign in to the Azure portal.

  2. Choose More Services > Monitoring + Management > Intune.

  3. On the Intune blade, choose Device configuration.

  4. On the Device Configuration blade, choose Setup > Telecom Expense Management.

    Look for the Active connection status at the top of the page.

    Azure portal showing datalert connection status Active

Step 3: Deploy the Datalert app to corporate enrolled devices

To ensure that data usage from only corporate-owned lines is collected, you need to create device categories in Intune, and then target the Datalert app to only corporate phones. Complete the steps in the following subsections.

Define device categories and device groups mapped to the categories

Depending on your organizational needs, you'll need to create at least two device categories (for example, Corporate and Personal) and create dynamic device groups for each category. You can create more categories for your organization, as needed.

These categories will be shown to users during enrollment. Depending on which category users choose, the enrolled device will be moved to the corresponding device group. For steps on how to create device categories, see Map devices to groups.

Screenshot of the Add a policy blade

Create the Datalert app in Intune

Follow these steps to create the Datalert app in Intune for each platform. iOS is used as an example in these steps.

  1. On the Intune blade of the Azure portal, choose Mobile apps.

  2. On the Mobile apps blade, choose Manage > Apps.

  3. Select Add to add an app.

  4. Select the app type. For example, for iOS, you would select iOS Store App.

  5. In Search the App Store, look for the Datalert app by typing Datalert in the search window.

  6. Select the Datalert app, and select OK.

    Screenshot of the Add a policy blade

  7. Complete the remaining steps to create an app for iOS.

    Screenshot of the Add a policy blade

Assign the Datalert app to the corporate device group

  1. Select the iOS Datalert app that you created in the previous step.

  2. On the Apps blade, go to Manage > Assignments.

  3. Choose Select groups, and follow the steps to select the corporate device group.

  4. Choose whether to make the app installation required or optional for the group. The following example screenshot shows the installation as required, which means that users must install the Datalert app installation after enrolling their device.

    Screenshot of the Add a policy blade

Step 4: Add corporate paid phone lines to the Datalert console

You now have configured the Intune and Datalert services to communicate with each other. You now need to add your corporate paid phone lines to the Datalert console and define thresholds and actions for any cellular or roaming usage violations. You can either add corporate paid phone lines to the Datalert console manually or have the lines added automatically after the device is enrolled into Intune.

To set these items, go to the Datalert setup for Microsoft Intune page (http://www.datalert.fr/microsoft-intune/intune-setup), and follow the steps in the setup wizard under the Settings tab.

Screenshot of the Add a policy blade

The Datalert service is now active, and it starts monitoring data usage and disabling cellular and roaming data on devices that exceed the configured usage limits.

Client enrollment experience

For client enrollment experience see following:

Turning off the Datalert service

If you disable the Datalert service in the Azure portal:

  • All of the actions that have been applied to devices, due to past violations of the usage limits, are undone.
  • Users are no longer blocked from data access and roaming.
  • Intune still receives the signals coming from the service, but ignores them.

To turn off the service

  1. On the Telecom Expense Management blade in the Azure portal, select Disable.

  2. Select Save.

Viewing data usage and roaming reports

At this time, data usage reporting is available only in Saaswedo’s Datalert management console.

The instructions that your end users follow to install the Datalert app will be added soon.