Entra ID Groups Inspector is a Log Analytics dashboard that tracks changes to Azure Entra (Azure AD) groups, including creations, deletions, and membership edits. It surfaces audit-log data with built-in visuals, time filters, and export options for security and compliance workflows. Designed for Intune and Entra ID environments, it helps admins quickly validate group governance and access changes.
27 files scanned on Sep 20, 2026
Overall assessment: The Dell BIOS update reporting script largely implements telemetry and Dell data retrieval for Intune integration, which is expected in a managed environment. The Devices/Permissions script provides automated Graph API role assignments for a service principal, which is a common admin pattern but warrants strict access control and auditing. Notable concerns include: (1) hardcoded secret placeholders for Log Analytics credentials that should be sourced securely, (2) a potential runtime bug in GetModelWebResponse where the model GUID may not be correctly incorporated into the URL, and (3) the risk that automated App Role assignments could broaden MSI permissions if misconfigured. Recommendations: remove hardcoded secrets, fetch credentials from Key Vault or managed identity, implement payload/datasignature validation for remote downloads, add robust input validation and auditing for role assignments, and fix the GetModelWebResponse variable usage to ensure correct data retrieval.
A Log Analytics dashboard to monitor Windows authentication method usage (WHfB vs password) across devices and users. It reads the SigninLogs table to report counts, trends and adoption, showing who uses WHfB, who uses passwords, and how usage evolves over time. It supports filtering by device, user and time, and includes a ready-to-import workbook (Workbook.json) to add the report to a Log Analytics workspace in Intune-managed environments.
Free, customizable Azure Workbook dashboard templates for monitoring Microsoft Intune environments. Provides real-time visibility into device compliance, enrollment status, application deployments, security posture, and OS updates. Deploys in under 60 seconds with no app registration or custom permissions required. Data remains within your tenant with full customization support for queries, branding, and visualizations.
An iOS application for managing and monitoring Microsoft Intune-enrolled devices on the go. Features Azure AD authentication, real-time device inventory across all platforms, remote actions (sync, restart, lock, wipe), compliance monitoring, and multi-tenant support with biometric authentication.
An Azure Workbook for analyzing and tracking changes within Microsoft Intune environments. Provides rich audit log analysis with filters, profile type search with value change tracking, device identity and Autopilot hash tracking, and device operations audit logs.