Skip to content

README.md

Latest commit

 

History

History
86 lines (61 loc) · 2.35 KB

README.md

File metadata and controls

86 lines (61 loc) · 2.35 KB

Intune → Snipe-IT Sync

A Python script to sync Microsoft Intune managed devices into Snipe-IT, with the ability to filter by device platform.

Features

  • Fetch Intune managed devices via Microsoft Graph API
  • Normalize Android-Enterprise UPNs
  • Auto-create Snipe-IT categories, manufacturers, and models
  • Import devices into Snipe-IT with correct manufacturer_id, model_id, category_id, and status label
  • Check out assets to existing Snipe-IT users
  • --dry-run mode to preview actions without writing
  • --platform flag to limit sync to one of: windows, android, ios, macos, or all

Prerequisites

  • Python 3.7+
  • Azure AD App Registration with Application permissions:
    • DeviceManagementManagedDevices.Read.All
    • User.Read.All (if user info is fetched)
  • Snipe-IT API credentials with write access

Installation

  1. Clone this repository: 
    git clone https://github.com/yourorg/intune-snipe-sync.git
cd intune-snipe-sync
  2. Install dependencies: 
    pip install msal requests

Configuration

Set environment variables (or add to .env):

export AZURE_TENANT_ID="<your-tenant-guid>"
export AZURE_CLIENT_ID="<your-client-id>"
export AZURE_CLIENT_SECRET="<your-client-secret>"
export SNIPEIT_URL="https://my-snipeit.example.com/api/v1"
export SNIPEIT_API_TOKEN="<your-snipeit-api-token>"
export SNIPEIT_DEFAULT_STATUS="Ready to Deploy"

Usage

Dry run

Preview actions without writing to Snipe-IT:

python3 app.py --dry-run --platform windows

Actual sync

Sync devices (all platforms by default):

python3 app.py

Sync only Android devices:

python3 app.py --platform android

How it works

  1. Fetch Intune devices (filtering by --platform) via Graph API.
  2. Ensure Snipe-IT has an Intune category, the default status label exists, and models/manufacturers are created.
  3. Create hardware assets in Snipe-IT and check them out to users if assigned.

Troubleshooting

  • 403 Forbidden: Ensure your Azure AD app has appropriate Graph permissions and admin consent.
  • Missing fields: Verify your Snipe-IT instance has categories, models, and status labels enabled.
  • Status label not found: Check SNIPEIT_DEFAULT_STATUS matches exactly an existing label.

Contributing

Feel free to open issues or submit PRs.