Skip to content
App Info

Sync Clients From Your Microsoft Azure Portal Last updated: Aug 2, 2026

1. Navigate to Microsoft Entra Admin Center (https://entra.microsoft.com)

2. Expand Applications and select App registration

3. Give the application a name (ie., Vertask)

4. Select whether your org is Single Tenant of Multi Tenant then hit Register

  • If you are a global admin in 365 and are unsure of this, it is most likely single tenant

5. You are now on the' Overview' page as you now have the app registration created. Copy your Application (client) ID and Directory (tenant) ID; You will need them later.

6. You will need to create the 'Client secret' for your registered app.

  • Click 'Certificates & secrets' from the left menu
  • Click the '+New client secret' button.
  • Select how long your secret is valid. (Vertask will be unable to sync after this and a new secret will need to be generated to resume syncing.)
  • Click the 'Add' button.
  • Copy the Secret value, you will need it later. If you do not copy the secret now, you will have to do step 6 again as you will not be able to see it again.

7. We now have to make sure we have the appropriate permissions to sync users. Click API permissions on the left navigation.

If you want to sync users:

  • Click +Add a permission
  • Select Microsoft Graph
  • Select Application Permission
  • Now, scroll down to User and check the box next to the permission User.Read.All
  • Select the blue Add permission button at the bottom of the window to save the selection

If you want to sync devices:

  • Click +Add a permission
  • Select Microsoft Graph
  • Select Application Permission
  • Add the following permissions
  • User.Read.All, Device.Read.All — you already have these (device/user sync works)
  • DeviceManagementManagedDevices.Read.All — add (Intune id + now the serial)
  • DeviceManagementManagedDevices.PrivilegedOperations.All — add (for the Sync button)
  • DeviceLocalCredential.Read.All — add (to get Local Admin Password)
  • BitLockerKey.Read.All — add (to get Bitlocker recovery keys)

Select the blue Add permission button at the bottom of the window to save the selection

8. Once it saves, click the button to grant the access to the company: Grant admin access for CompanyName

9. Next, go Vertask Settings

10. From here, navigate to Integrations & Add-ons > Microsoft Azure/Entra > Edit Config

11. Here, set the sync frequency

12. Next, fill in the Tenant ID, Application ID and Client Secret from steps 5 and 6.

12. Finally, enable Sync Clients and Sync Devices, along with other options features.



Back to Settings