Microsoft Intune Graph Visualization
for MSPs and IT Admins

GraphLens is a read-only Microsoft Intune visualisation tool that maps policies, groups, apps and devices as an interactive graph — live from your Azure tenant. It reads data via the Microsoft Graph API with read-only permissions and stores nothing on its own servers. Built for Managed Service Providers (MSPs) and enterprise IT administrators.

GraphLens uses Azure Device Code Flow to automatically create an app registration inside your own Azure tenant. You sign in once with a Global Administrator account to grant consent — no manual configuration needed. Alternatively, you can enter an existing app registration's Tenant ID, Client ID and Client Secret manually.

Yes. GraphLens is strictly read-only — it cannot write, modify or delete anything in your Azure environment. For MSPs, each customer's data is isolated within their own tenant credentials. GraphLens never mixes data between tenants and stores no Intune data on its own infrastructure.

Yes. The device compliance view shows all managed Intune devices with their current compliance state — compliant, non-compliant, grace period, error, or unknown. You can filter by status, operating system and device category to quickly identify problem areas across your environment.

GraphLens maps AAD groups, compliance policies, configuration profiles, Settings Catalog policies, Administrative Templates (ADMX), app assignments, policy sets and device categories — and shows all assignments and relationships between them as a navigable node-edge graph.

The Microsoft Intune portal shows policies and groups as separate lists. GraphLens makes the relationships between them visible in one interactive view. It also surfaces orphaned objects — policies or apps that exist in your tenant but are not assigned to any group — which are invisible in the standard portal.