Connecting Altitude to Intune and Windows Update for Business Reports

This guide will help you get started with connecting Altitude to your Intune environment to enable the dashboards to populate with your data.

Feature Configuration

To start populating Altitude with data from your environment you will first need to configure the connections. 

Head over to Admin Settings.

Select the Feature Configuration tab.

Intune & Entra Configuration

Expand the Intune & Entra Reporting Connector Setup tile. 

Click on the edit button

Input your Entra tenant ID into the Value box and then click on the Save icon.

Then click on Grant Consent.

If you receive the following error:

It means that you do not have an Azure Subscription connected to the tenant you are using that does not have a log analytics workspace connected, with Windows Update for Business Reports enabled. 

Head here for a guide 

You will be prompted to sign in with your account - this account will need appropriate permissions to approve the App Registration API permissions. 

An Entra ID Global Admin or Application Administrator will need to grant consent to the Altitude-GraphSync app to allow access to your data for Intune reporting.

 

Accept the permissions to authorise the syncing of the MS Graph data.

After accepting the permissions, you can test the configuration and connection.

If you receive an error during the Test Configuration - please ensure you at least 1 device available in Intune. 

Enable the connector when you are ready.

Intune and Entra configuration is now complete.

Windows Update for Business Reporting Configuration

The next step is to configure WUfB reporting.

If you haven't yet setup WUfB reporting in your Intune environment - follow this guide from Microsoft https://learn.microsoft.com/en-us/windows/deployment/update/wufb-reports-enable

Expand the WUfB Reporting Configuration tab.

Obtain your WUfB Log Analytics Workspace ID from Azure Portal and add it to the tab as shown, then Grant Consent.

You will be prompted to accept the permissions:

Due to limitations in Microsoft Graph API, the only option for Windows Update deployment settings details is Read and Write, they do not provide a Read only option. 

If you receive this error

You will need to follow the steps in this guide to grant the Altitude Graph Sync App access to the Log Analytics Workspace.

Once completed, test the configuration and enable the connector.