Live demo with sample data. This is the real app, a minute after connecting a tenant.

Start 30-day free trial

Settings

How Atliso checks and reports on Northwind Traders (sample data).

Northwind Traders (sample data)

Connected to Microsoft Graph, read access

Tenant ID
demo
Approved
it.admin@northwind.example, 16 Oct
Last read
just now. Next at 06:00 UTC.
In Entra ID
Enterprise applications > "Atliso Pro"

What Atliso can do

Read-only Microsoft Graph permissions, plus one to add scripts you approve. Atliso never reads BitLocker keys or LAPS passwords.

Read

  • DeviceManagementManagedDevices.Read.AllList Intune devices, encryption and compliance state
  • BitlockerKey.ReadBasic.AllSee which devices have a recovery key in Entra ID (never the key itself)
  • DeviceLocalCredential.ReadBasic.AllSee when LAPS passwords were last backed up (never the password)
  • Organization.Read.AllTenant name and licences, to know whether Remediations are available
  • DeviceManagementServiceConfig.Read.AllExpiry dates of the Apple push certificate and enrolment tokens
  • DeviceManagementApps.Read.AllExpiry dates of Apple Apps and Books tokens
  • ProfilePhoto.Read.AllShow your team's Entra profile photos in Atliso

Write, only when you click Deploy

  • DeviceManagementScripts.ReadWrite.AllRead remediation results, and add Atliso fixes when you click Deploy

Remove tenant

Deletes this tenant's scans, tickets, fix history and team from Atliso. Fixes already deployed stay in Intune.

To cut Microsoft access too, remove "Atliso Pro" in Entra ID > Enterprise applications.