Connect to the Data Warehouse with Power BI

You can use the Power BI Compliance app to load interactive, dynamically generated reports for your Intune tenant. Additionally, you can load your tenant data in Power BI using the OData link. Intune provides connection settings to your tenant so that you can view the following sample reports and charts related to:

  • Devices
  • Enrollment
  • App protection policy
  • Compliance policy
  • Device configuration profiles
  • Software updates
  • Device inventory logs

There are also trends highlighted for the enrollment, compliance, device configuration profile, and software updates. Sample charts and reports apply user-friendly filters to the canvas. To use advanced filters, check out the Filter pane in Power BI Desktop.

Note

Power BI template apps enable Power BI partners to build Power BI apps with little or no coding, and deploy them to any Power BI customer. For example, you can use the Power BI compliance report template in V2.0. V2.0 includes an improved design, as well as changes to the calculations and data that is being surfaced as part of the template. For more information, see Update a template app, Intune Compliance (Data Warehouse) app, and What are Power BI template apps?

The following steps show you how to download the Power BI file and how to use the OData link with Power BI.

Azure AD and Intune credential requirements

Authentication and authorization are based on Azure AD credentials and Intune role-based access control (RBAC). All global administrators and Intune service administrators for your tenant have access to the Data warehouse by default. Use Intune roles to provide access for more users by giving them access to the Intune data warehouse resource.

Requirements for accessing the Intune Data Warehouse (including the API) are:

  • User must be one of:
    • Azure AD global administrator
    • An Intune service administrator
    • User with role-based access to Intune data warehouse resource
    • User-less authentication using application-only authentication

Install Power BI

Install the latest version of Power BI Desktop. For more information, see Power BI Desktop.

Load the data and reports using the Power BI Intune Compliance Data Warehouse App

The Power BI Intune Compliance (Data Warehouse) app contains information for your tenant and a set of prebuilt reports based on the Data Warehouse data model.

Note

The Power BI Intune Compliance Data Warehouse app is not supported for Azure Government cloud environments.

  1. Navigate to the AppSource page of the Intune Compliance (Data Warehouse) app to begin the installation process.
  2. Click the Get It Now button, and then click Continue.
  3. When prompted to install the Power BI app, click Install.
  4. After the installation completes, click on the Intune Compliance (Data Warehouse) app tile.
  5. Click the Connect button. The Connect to Intune Compliance (Data Warehouse) dialog is displayed.
  6. Click the Sign in button.
  7. Sign in with a user account that has access to the Intune Data Warehouse for the tenant that has reports you want to view.
  8. To view the included dashboard, click the Dashboards tab, then click the Compliance Overview dashboard.
  9. To view all the available reports, click the Reports tab, then click the Compliance V1.0 report. Browse through the report pages by clicking on the tabs at the bottom.
  10. To make it easy to navigate back to these reports later, click the star next to the Compliance V1.0 report. This will add the report to your Power BI favorites.

Alternatively, you can install the app from the Microsoft Endpoint Manager admin center:

  1. Sign in to the Microsoft Endpoint Manager admin center.
  2. Select Reports > Intune Data warehouse > Data warehouse.
  3. Select Get Power BI App to access and share pre-created Power BI reports for your tenant in the browser.
  4. Follow steps 2-10 above.

With a client authenticated to Azure AD, the OData URL connects to the RESTful endpoint in the Data Warehouse API that exposes the data model to your reporting client. Follow these instructions to use Power BI Desktop to connect and create your own reports. You are not limited to Power BI Desktop, but can use your favorite analytic tool with the OData URL provided the client supports OAUTH2.0 authentication and the OData v4.0 standard.

  1. Sign in to the Microsoft Endpoint Manager admin center.
  2. Select Reports > Intune Data warehouse > Data warehouse.
  3. Retrieve the custom feed URL from the reporting blade, for example:
    https://fef.{yourtenant}.manage.microsoft.com/ReportingService/DataWarehouseFEService/dates?api-version=v1.0
  4. Open Power BI Desktop.
  5. Choose File > Get Data. Select OData feed.
  6. Choose Basic.
  7. Type or paste the OData URL into the URL box.
  8. Select OK.
  9. If you have not authenticated to Azure AD for your tenant from the Power BI desktop client, type your credentials. To gain access to your data, you must authorize with Azure Active Directory (Azure AD) using OAuth 2.0.
    1. Select Organizational account.
    2. Type your username and password.
    3. Select Sign In.
    4. Select Connect.
  10. Select Load.

Next steps

You can find the answers to questions about your environment such as the number of devices enrolled by day over the last week. You can gain insight into your Intune tenant and client population using the Intune Data Warehouse Power BI reports retrieved from the blade in the Microsoft Endpoint Management admin center. However, Intune provides a number of additional ways to extend or reuse the data. Power BI and the Intune Data Warehouse API provide additional functionality, for example: