Skip to content

Semantic Model Parameters Explained

The BI for Intune dataset contains some parameters that must be configured to synchronize data from Intune to Power BI. Other parameters add additional functionality to BI for Intune. This article explains each of the parameters in detail.

Step 1: Open the BI for Intune workspace

  1. To view or modify the dataset parameters select Workspaces.
  2. Select the BI for Intune workspace.

Step 2: Open semantic model settings

  1. Hover over the bi_for_intune Semantic model to reveal a kebab menu (three vertical dots).
  2. Select the kebab menu.
  3. Select Settings. intune model settings

Step 3: Expand the Parameters section

  1. Expand Parameters.

Step 4: Configure Sign-Ins Failure Only

            AzureAD Sign-Ins Failure Only
  1. Required configuration: None
  2. Default value: TRUE
  3. Determines whether or not successful sign-ins are available in the reports. By default, failed sign-in data are available in the reports. Getting successful sign-in data will result in slower synchronizations and possibly cause synchronization timeouts.

Step 5: Configure Log Analytics Enable

            AzureAD LogAnalytics Enable
  1. Required configuration: Yes, only for our customer inventory solution and/or Windows Update for Business reports (formerly named Azure Update Compliance v2.)
  2. Default value: FALSE

Step 6: Enter the API Key

            ApiKey
  1. Required configuration: Yes
  2. Default value: Blank
  3. This should be the API Key that you received from us after completing the Request a Trial Key form.

Step 7: Enter the Tenant ID

            AzureAD TenantID
  1. Required configuration: Yes
  2. Default value: Blank
  3. This should be your Azure AD tenant ID.
  4. Note: An easy way to get this is to go to https://www.whatismytenantid.com/

Step 8: Enter the Client ID

            AzureAD ClientID
  1. Required configuration: Yes
  2. Default value: blank
  3. The Application (client) ID from the Azure AD App Registration.

Step 9: Enter the Client Secret

            AzureAD ClientSecret
  1. Required configuration: Yes
  2. Default value: Blank
  3. The Azure AD Client Secret is the most common mistake that customers make when installing BI for Intune.  It is shown as the "Value" when adding the client secret to the Azure AD App Registration. The Client Secret does not have dashes (-) in it. The Client Secret looks similar to this: aBcDE~fGh.I.JKlmnopqRsTuVwXyZ1234567890

Step 10: Configure Sign-Ins Days

            AzureAD Sign-Ins Day(s)
  1. Required configuration: None
  2. Default value: 1
  3. By default, only sign-in data from the last 1 day are available in the reports. Getting more days of sign-in data will result in slower synchronizations and possibly cause synchronization timeouts. The max value is 7.
  4. Note, sign-in data can be completely disabled by setting this value to -1.

Step 11: Configure the API Page Size

            AzureAD PageSize API
  1. Required configuration: None
  2. Default value: 10000
  3. Determines the page size for MS Graph queries. Do not change this value unless instructed to do so by PowerStacks support.

Step 12: Enter Log Analytics Workspace ID

            AzureAD LogAnalytics WorkspaceID
  1. Required configuration: Yes, only for our custom inventory solution and/or Windows Update for Business reports (formerly named Azure Update Compliance v2.)
  2. Default value: Blank
  3. This is the workspace ID of the Log Analytics workspace where the custom inventory and/or Windows Update for Business Reports data is stored.
  4. When using our custom inventory solution and Windows Update for Business Reports both must store data in the same Log Analytics workspace.

Step 13: Configure Log Analytics Days

            AzureAD LogAnalytics Day(s)
  1. Required configuration: None
  2. Default value: 30
  3. Allows you to configure the number of days of data to pull from Log Analytics.

Step 14: Configure Log Analytics Page Size

            AzureAD LogAnalytics PageSize API
  1. Required configuration: None
  2. Default value: 10000
  3. Determines the page size of Log Analytics queries. Do not change this value unless instructed to do so by PowerStacks support.

Step 15: Configure Export URL Enable

            AzureAD Export URL Enable
  1. Required configuration: Yes, only if the AzureAD Export URL has been populated.
  2. Default value: FALSE
  3. Determines if the URL from the AzureAD Export URL is used or if the URL is found automatically by the app.
  4. Setting this parameter to TRUE will create a new data source credential that must be configured. Authentication method: Anonymous
  5. Privacy Level: Organizational
  6. Check "Skip test connection"

Step 16: Enter the Export URL

            AzureAD Export URL
  1. Required configuration: None
  2. Default value: Blank
  3. The export URL varies from one Azure tenant to another. If this value is not populated our code will find the correct URL that your Intune environment uses to export data, however, to avoid redirection and improve security it is recommended to set this parameter.
  4. Be sure to also set AzureAD Export URL Enable = TRUE when using this parameter.
  5. To learn more please see our Configure Intune Export API documentation.

Step 17: Configure Export URL Timeout

            AzureAD Export URL Timeout (s)
  1. Required configuration: None
  2. Default value: 3600
  3. Determines the amount of time the sync process waits for each Intune export job before it times out. Do not change this value unless instructed to do so by PowerStacks support.

Step 18: Configure Export URL Wait

            AzureAD Export URL Wait (s)
  1. Required configuration: None
  2. Default value: 1
  3. Determines the amount of time the sync process waits for each Intune export job to report a status and then loops until a status is received. Do not change this value unless instructed to do so by PowerStacks support.

Step 19: Configure Compliance Policy Settings

            AzureAD Compliance Policy Setting State Enable
  1. Required configuration: None
  2. Default value: TRUE
  3. This parameter disables the synchronization of Configuration Profiles of the Settings Catalog type. It is TRUE, meaning that the results of those profiles are sync'd to Power BI. This was parameter was added due to periodic issues in a small number of Azure data centers that caused synchronization failures. Leave at the default value unless instructed otherwise by PowerStacks support.

Step 20: Configure Group Dynamic Members

            AzureAD Group Dynamic Members Only
  1. Required configuration: None
  2. Default value: TRUE
  3. When set to TRUE only members of dynamic groups will be available in the reports. Changing this to FALSE will make members of assigned groups available in the reports. However, getting the members of assigned groups is a more intensive process and might cause synchronization timeouts.

Step 21: Configure Group Members Enable

            AzureAD Group Members Enable
  1. Required configuration: None
  2. Default value: TRUE
  3. Determines whether or not the members of Azure AD groups are available in the reports. Depending upon the number of Azure AD groups this could cause synchronization failures.
  4. By default, group members of dynamic groups are available in the reports however this can be modified by the AzureAD Group Dynamic Members Only parameter.

Step 22: Configure the Pace API interval

            AzureAD Pace API (s)
  1. Required configuration: None
  2. Default value: 0
  3. Determines the amount of time the sync process waits for a response from the Pace API's and then it loops until a response is received. Do not change this value unless instructed to do so by PowerStacks support.

Step 23: Configure Disk Max Wear

            AzureAD Disk Max Wear
  1. Required configuration: None
  2. Default value: 90
  3. Used to calculate disk health. Default value is based upon the Microsoft MSFT_StorageReliabilityCounter class documentation.

Step 24: Configure Disk Max Read Errors

            AzureAD Disk Max Read Errors
  1. Required configuration: None
  2. Default value: 100
  3. Used to calculate disk health. Default value is based upon the Microsoft MSFT_StorageReliabilityCounter class documentation.

Step 25: Configure Disk Max Write Errors

            AzureAD Disk Max Write Errors
  1. Required configuration: None
  2. Default value: 100
  3. Used to calculate disk health. Default value is based upon the Microsoft MSFT_StorageReliabilityCounter class documentation.

Step 26: Configure Export URL Batch

            AzureAD Export URL Batch
  1. Required configuration:
  2. Default value: 1. azuread export url batch

Step 27: Configure Application State Enable

            AzureAD Application State Enable
  1. Required configuration:
  2. Default value:
  3. This parameter azuread script state enable

Step 28: Configure App Inventory Page Size

            AzureAD LogAnalytics App Inventory PageSize API
  1. Required configuration:
  2. Default value:
  3. Used to . azuread loganalytics app inventory pagesize api

Step 29: Configure Script State Enable

            AzureAD Script State Enable
  1. Required configuration: None
  2. Default value: TRUE
  3. This parameter disables the synchronization of Configuration Profiles of the Settings Catalog type. It is TRUE, meaning that the results of those profiles are sync'd to Power BI. This was parameter was added due to periodic issues in a small number of Azure data centers that caused synchronization failures. Leave at the default value unless instructed otherwise by PowerStacks support. azuread script state enable

Step 30: Configure Export URL for Cloud PC

            AzureAD Export URL CloudPC
  1. Required configuration: None
  2. Default value: https://graph.microsoft.com
  3. This parameter only needs to be configured in environments using Windows 365 (Cloud PC) and also have configured the AzureAD Export URL. azuread export url cloudpc

Step 31: Configure Driver Updates Enable

            AzureAD Driver Updates Enable
  1. Required configuration: None
  2. Default value: TRUE
  3. This parameter disables the synchronization of driver information from Windows Driver update management in Microsoft Intune. Default value is TRUE, meaning that the Windows Driver Updates information is sync'd to Power BI. This was parameter was added because the driver data has caused timeout issues for several customers. For best results be selective about the drivers which you approve and keep them to a minimum. azuread driver updates enable

Step 32: Configure the Login URL

            AzureAD Login URL
  1. Required configuration: None
  2. Default value: https://api.loganalytics.io
  3. This parameter is only used in multi-cloud environments. For example, if you have some things in the Gov cloud and other things in the public cloud. azuread login url

Step 33: Configure the Graph URL

            AzureAD Graph URL
  1. Required configuration: None
  2. Default value: https://graph.microsoft.com
  3. This parameter is only used in multi-cloud environments. For example, if you have some things in the Gov cloud and other things in the public cloud. azuread graph url

Step 34: Configure the Log Analytics URL

            AzureAD LogAnalytics URL
  1. Required configuration: None
  2. Default value: https://api.loganalytics.io
  3. This parameter is only used in multi-cloud environments. For example, if you have some things in the Gov cloud and other things in the public cloud. azuread loganalytics url

Step 35: Configure Timeline Event Days

            AzureAD Timeline Event Day(s)
  1. Required configuration: No
  2. Default value: 7 days
  3. Max value: 30
  4. -1 disables this feature.
  5. Only valid for customers with the "Microsoft Intune Suite add-on" license.
  6. Defines the number of days data is pulled from the device timeline in Endpoint Analytics. azuread timeline event day(s)

Step 36: Configure Group Members Filter

            AzureAD Group Members Filter Starts With
  1. Required configuration: None
  2. Default value: % (filter is disabled)
  3. This parameter allows for defining a group name prefix to limit group sync to only get members of groups beginning with the prefix. azuread group members filter starts with

Step 37: Configure Nested Group Crawler

            AzureAD Group Members Nested Crawler Enable
  1. Required configuration: None
  2. Default value: FALSE
  3. Changes to this parameter only apply if a group members prefix is assigned. By default, when AzureAD group members filter starts with is set to '%' we get all transitive group members. If you define a prefix you need to also define True or False here to determine whether or not we get transitive group members. azuread group members nested crawler enable