Intune web services

1 What is here

These web services manage Intune applications, application groups, assignments and filters from a script.

They are listed under Settings › Web Services, with names that start with Intune or Intune Application Groups. Like all web services, a role must have access to each one on its Security tab, and the call can only reach the users, devices, applications and groups that the role may use. See Security.

Parameters that are the same everywhere

Parameter names show their type: str is text, astr is a list of text and bln is true or false.

2 Intune Application Groups

An application group bundles applications, so that they are installed together. These web services are in WS_IntuneApplicationGroups.asmx.

A group is returned with its Id, DisplayName, Description, Status, EntraIdGroupId and Items. An item has a Type, Application or ConfigurationPolicy, and an ItemId. Only applications can be added to or removed from a group with these web services.

3 Install software for many users or devices

Install or uninstall several applications for several users, or for several devices, in one call. These are in WS_Intune.asmx.

Every application is installed for every user or device, with the same logic as the calls for a single user or device. The answer has one result for each user or device, with three values:

A target that cannot be found, or an application that the role cannot use, is reported in the result and does not stop the other targets. The devices are synchronised once after the call. To change a single user or device, use InstallSoftwareForUser, UninstallSoftwareForUser, InstallSoftwareForDevice or UninstallSoftwareForDevice, which take strUserPrincipalName or strManagedDeviceName, strApplicationName and strIntuneTenantName.

4 Assign groups and filters to applications

Assign a group to many applications at once, for example a test group as available, and add or remove assignment filters in bulk.

A filter is found by its name or its ID. These web services answer with one result for each assignment, named application -> group (intent), with Success and a Message, in the same way as the install web services above.

5 Create a Win32 application

Create a Win32 application in Intune from a package file that is on the SoftwareCentral server.

• strIntunewinFilePath is the full path of an .intunewin file, as the SoftwareCentral server sees it.
• strIntuneApplicationTemplateName is the name of an application template that the role may use. Leave it empty to use the default template.

The application is created in the same way as when you create an Intune application in SoftwareCentral: its properties are read from the package, and the template provides the install and uninstall commands, return codes and requirements. The web service returns true or false.

6 Examples

Lists are sent as lists. In PowerShell, call the web service with New-WebServiceProxy (SOAP):

# Install two applications for two users, and show one line per user.
$proxy = New-WebServiceProxy -Uri "https://swc/Api/WS_Intune.asmx" -Class "Proxy" -UseDefaultCredential

$users = @("alex@contoso.com", "morgan@contoso.com")
$applications = @("7-Zip", "Adobe Acrobat Reader")

$results = $proxy.InstallSoftwareForUsers($users, $applications, "Default")
$results | Format-Table Target, Success, Message

With JSON, send the lists as arrays:

# Assign a test group as available to two applications.
$body = @{
    astrGroupNames       = @("Pilot users")
    astrApplicationNames = @("7-Zip", "Adobe Acrobat Reader")
    strIntent            = "Available"
    strIntuneTenantName  = "Default"
} | ConvertTo-Json

$url = "https://swc/Api/WS_Intune.asmx/AssignGroupsToApplications"
Invoke-RestMethod -Method Post -Uri $url -ContentType "application/json" -Body $body -UseDefaultCredentials

With HTTP GET or POST, repeat the parameter once for each value:

https://swc/Api/WS_Intune.asmx/InstallSoftwareForUsers?astrUserPrincipalNames=alex@contoso.com&astrUserPrincipalNames=morgan@contoso.com&astrApplicationNames=7-Zip&strIntuneTenantName=Default

To call as an app or as a user with an access token, see Call web services using Microsoft Security Tokens. The PowerShell box in the Manage window shows the parameter names of each web service.

7 Best practice

8 Troubleshooting