Type: Delegate

Description: Sign in and read user profile.

API: GET /me

Purpose: MES Console single sign-on: retrieve user's group memberships for role-based access control via Azure (only allows Lookout to read the profile of the specific user initiating the single sign-on).

Type: Application

Description: Read Microsoft Intune apps.

API: GET /deviceAppManagement/managedAppRegistrations

Purpose: Intune MAM support: check if devices are enrolled in Intune MAM.

Type: Application Description: Read all devices. API: GET /devices

Purpose: Enrollment polling: retrieve lists of devices to be enrolled.

API: GET /devices/{id}

Purpose: Enrollment polling: retrieve individual devices to be enrolled or deactivated.

API: GET /devices/delta

Purpose: Enrollment polling: find enrollment group IDs based on user-configured names.

Type: Application

Description: Read all group memberships.

API: GET /groups

Purpose: Enrollment polling: find enrollment group IDs based on user-configured names.

API: GET /groups/delta

Purpose: Enrollment polling: find groups with membership changes since last poll.

API: GET /groups/{id}/members

Purpose: Enrollment polling: retrieve group members to find users to enroll and identify subgroups.

Type: Application

Description: Read all users' full profiles.

API: GET /users ¹

Purpose: Enrollment polling: retrieve a list of users to obtain their owned devices.

API: GET /users/{id | UPN}/ownedDevices²

Purpose: Enrollment polling: retrieve a single user to obtain their owned devices.

Type: Application

Description: Read all applications.

API: GET /servicePrincipals

¹ May be deprecated in favor of retrieving devices filtered by owner ID in our Q1 2024 poller update

² May be deprecated in favor of retrieving devices filtered by owner ID in our Q1 2024 poller update

Purpose: Intune discovery: find servicePrincipal for Intune (a servicePrincipal can be thought of as the specific instance of a service being used within a tenant).

API: GET /servicePrincipals/{servicePrincipalId}/endpoints

Purpose: Intune discovery: find the URL to use for Intune API calls.

Type: Application

Description: Get or Send device threat information to Intune.

API: GET /StatelessPartnerDeviceDataSyncService/DataUploadMessages

Purpose: App inventory: retrieve list of installed apps on device.

API: PUT /StatelessPartnerDeviceDataSyncService/DataUploadMessages

Purpose: App inventory: initiate request for list of installed apps on device

API: PUT /StatelessPartnerTenantDataSyncService/PartnerTenantHeartbeat

Purpose: Tenant heartbeat: indicate to Intune that the connector is healthy.

API: PUT /StatelessPartnerTenantDataSyncService/PartnerTenants

Purpose: Tenant provisioning: provision the tenant to use Stateless Partner Device Data Sync Service.