In this article
What are Intune Deployment Templates?
Intune deployment templates are a predefined set of Intune assignments which can be used by Rimo3 Boost360 to automate the deployment of applications in Intune. The are 3 steps to using Intune deployment templates:
- Define a new Intune deployment template - templates are created and managed in Change360. Creating a template doesn't trigger any activity in Intune.
- Select a template exporting to Intune - a template can be selected when onboarding an application from Patch360 and choosing the Export to Intune pipeline, or when exporting an application to Intune from Change360
- A deployment is automatically created and executed in Boost360 - once the application has been successfully exported to Intune a new deployment is created in Boost360 using the selected template. Boost360 will then trigger the deployment as per the phases defined in the template.
If you are not already familiar with Boost360 for Intune, you can learn more about it and how to create deployments here.
Required Permissions
The following permissions are required for Change360 to create new Intune deployment templates, and for Boost360 to create and execute deployments based on the deployment templates.
Change360 permissions:
- Group.Read.All - to allow user to select to which security groups applications will be assigned
- DeviceManagementApps.ReadWrite.All - to retrieve applications with their assignments and to update those assignments.
- DeviceManagementConfiguration.Read.All - to retrieve filters
When creating a new Intune deployment template and selecting an Intune instance Change360 will check for the required permissions and prompt you to grant permissions via an Enterprise App Registration if permission have not be granted.
Defining a new Intune Deployment Template
Intune deployment templates are defined and managed in Change360
- In Change360 click on Extend Menu and select Intune Templates from the new Template Management section
- On the Intune Deployment Templates screen click on + New template
- On the General Details tab enter the following details, then click next:
- Enter a unique name for the template
- Optionally enter a description for the template
- Select the target Intune Instance for the template
Once selected Change360 will check for required permissions, if all required permissions have been granted the following will be displayed:
Otherwise, you will be prompted to grant permissions via an Enterprise App Registration
- On the Phases tab you can add up to 5 phases. Phase names can be customised.
- For each Phase you add you will need to:
- Configure a trigger
- Add one or more groups
- Configure the assignment for each group on the Deploy setup tab
- Select a trigger from the dropdown box:
- Immediate phases are triggered as soon as the previous phase finishes, or, if it is the first phase in the deployment, as soon as the deployment starts.
- Scheduled phases run at the time you specify, after the chosen number of days has passed since the previous phase finished, or since the deployment started for phase one.
- To add one or more groups, click on Assign groups or click on Next
- On the Group Selection tab search for and select one or more groups to be assigned as part of the selected phase.
If you have created multiple phases, you can select each phase from the left-hand pane to review and configure its assigned groups
- Click Next
- On the Deploy Setup tab you can configure the assignment details for all groups in the selected phase or each group individually.
PRO TIP: Start by configuring the settings that apply to all groups, then refine and customize the configuration for each group individually.
- If you have added multiple phases, use the Phases dropdown in the left-hand pane to select each phase and configure its assigned groups.
- Click Next
- On the Overview tab you can review the configured phases and make changes, if necessary, before proceeding. To add additional phases, click on the Phases tab, add the additional phases, and repeat the group assignment and configuration steps above.
You will not be able to create an Intune deployment template if if one or more phases do not have a group assigned.
- Click Submit to create the Intune Deployment Template.
The Intune Deployment Template will now be available to use when the Intune instance specified in the template is selected as part of the Export to Intune pipeline in Patch360 or when exporting to Intune from Change360.
Using an Intune Deployment Template in Patch360
When Onboarding or Subscribing to an application in Patch360 you can choose to use an Intune Deployment Template when:
- The selected Pipeline Action is Export to Intune
- The selected Intune Tenant has at least one Intune Deployment Template associated with it
When you select an Intune Deployment Template, you can subscribe to a package only if you choose an Evergreen template. Non-evergreen templates support the Onboard action only.
Using an Intune Deployment Template when Exporting from Change360
When Onboarding or Subscribing to an application in Patch360 you can choose to use an Intune Deployment Template when the selected Intune Instance has at least one Intune Deployment Template associated with it.
When exporting an application to Intune from Change360 you can select any Intune Deployment Template associated with the selected Intune Instance. However, even if you select an Evergreen template it will only be applied for that specific export.