Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.ravenna.ai/llms.txt

Use this file to discover all available pages before exploring further.

Microsoft Intune provides AI agent tools for looking up managed device information and installed applications. Reference these tools in using @ mentions to enable automated device lookups during ticket handling.

​
Available tools

Find devices

Searches for managed devices in Microsoft Intune for the ticket requester. Supports filtering by serial number, device name, model, or operating system. Results are always scoped to the current requester’s email address.Tool name: @Find DevicesInput fields:
  • Serial number
  • Device name
  • Model (e.g., “Surface Pro”, “iPhone 15”, “ThinkPad X1”)
  • Operating system (e.g., “Windows”, “iOS”, “Android”, “macOS”)
Output data:
  • Device name, operating system, OS version
  • Model, manufacturer, serial number
  • Compliance state, last sync time
  • Device ID, enrollment date, management state
  • Primary user (UPN)
Common use cases:
  • Look up requester devices when troubleshooting hardware or software issues
  • Verify device compliance before approving access requests
  • Identify device details for IT support workflows
  • Check when a device last synced with Intune
Example rule:

Intune device lookup rule

Retrieves detected applications installed on a specific Intune managed device. Requires a device ID obtained from the Find Devices tool. Supports optional filtering by app name, platform, or publisher.Tool name: @Get Device AppsInput fields:
  • Intune managed device ID (from Find Devices results)
  • App name filter (optional, substring match)
  • Platform filter (optional, e.g., “windows”, “ios”, “macOS”)
  • Publisher filter (optional, substring match)
Output data:
  • Application name, version, publisher
  • Platform
  • App ID
Common use cases:
  • Verify whether a specific application is installed on a user’s device
  • Audit installed software for compliance or licensing checks
  • Troubleshoot application issues by checking installed versions
  • Identify outdated software that needs updating
Example rule:

Intune device apps lookup rule

Triggers an Autopilot reset on a managed Windows device, wiping it and re-provisioning it through Windows Autopilot. The device is resolved from the ticket requester’s context.
An Autopilot reset wipes all data from the device and re-provisions it from scratch. Confirm with the user before triggering this action.
Tool name: @Autopilot ResetInput fields:
  • Device (resolved from ticket context)
Common use cases:
  • Reset a user’s device when troubleshooting reveals a system-level issue
  • Reprovision devices as part of automated IT support workflows
  • Prepare a device for a new user assignment
Example rule:

Intune Autopilot reset rule

Retires an Intune-managed device, removing company data and management profiles while leaving personal data intact.Tool name: @Retire DeviceInput fields:
  • Device (resolved from ticket context)
Common use cases:
  • Remove corporate data from a BYOD device during offboarding
  • Retire devices that should no longer be managed
  • Automate device retirement in offboarding workflows
Example rule:

Intune retire device rule

Forces a device to check in with Intune and pull pending policies, configuration profiles, and compliance updates immediately.Tool name: @Sync DeviceInput fields:
  • Device (resolved from ticket context)
Common use cases:
  • Push urgent policy updates when a user reports missing configurations
  • Verify a device picks up new compliance requirements
  • Troubleshoot devices that appear out of sync
Example rule:

Intune sync device rule

Rotates the BitLocker recovery key on the specified Windows device. The new key is stored in Intune for administrator access.Tool name: @Rotate BitLocker KeyInput fields:
  • Device (resolved from ticket context)
Common use cases:
  • Rotate recovery keys after they have been shared during support
  • Implement security compliance key rotation
  • Respond to incidents by rotating encryption keys
Example rule:

Intune BitLocker key rotation rule

Performs a full wipe of an Intune-managed device, removing all data and restoring factory settings. For macOS devices, returns a 6-digit unlock code.
A full wipe is destructive and removes all data from the device. Make sure the user has backed up any necessary data before triggering this action.
Tool name: @Wipe DeviceInput fields:
  • Device (resolved from ticket context)
Output data:
  • macOS unlock code (only for macOS devices)
Common use cases:
  • Wipe lost or stolen devices to protect corporate data
  • Prepare devices for decommissioning
  • Respond to security incidents requiring immediate data removal
Example rule:

Intune wipe device rule

Assigns an Intune management script to a group so it runs on all devices belonging to group members.Tool name: @Assign ScriptInput fields:
  • Script ID
  • Entra group
  • Organization
Common use cases:
  • Deploy remediation scripts to affected teams
  • Assign configuration scripts during onboarding
  • Automate script deployment based on ticket context
Example rule:

Intune assign script rule

​
Setup

1

Install Intune integration

Follow the Microsoft Intune setup guide to connect your Intune tenant to Ravenna.
2

Configure agent

Navigate to your agent’s settings and ensure the Intune tool appears in the Tools section under Capabilities.
3

Create rules

Write that reference the Intune tool using @ mentions.
4

Test the tool

Test your rules in a controlled environment to verify the tool returns expected device data.

​
Best practices

  • Device results are automatically scoped to the ticket requester’s email, so no additional user filtering is needed
  • Combine device lookup with compliance checks in access request workflows
  • Use serial number for precise device identification when the requester has multiple devices
  • Chain Find Devices with Get Device Apps for complete device audits: look up the device first, then check its installed applications
  • Use the app name, platform, and publisher filters in Get Device Apps to narrow results when a device has many installed applications
Learn more about configuring agents and writing effective rules