Patch My PC Report

The guide describes how to setup a Patch My PC Power BI report for Intune using Azure automation to regularly export data from Intune into Azure blob storage as the data source for the report.

Overview

In this guide we will create a Power BI report from a template to report on apps in Intune that are managed by the Patch My PC publishing service. Patch My PC is a great tool for keeping 3rd party applications up-to-date. The report is only for applications in Intune (not ConfigMgr), and apps, updates and custom apps are supported.

Two Reports

There are two report options - you can use either or both. The Overview report is built from summarized data in Intune. This report does not contain the detailed installation status for each device but does provide an overview of installation numbers per application, for example. The Detailed report is more or less the same as the Overview report except that it is built from the raw data exports for each device for each application and as such contains additional detailed installation data such as error codes. With this report, you can search for all apps targeted to a particular device or set of devices and view the installation status for each, for example.

Because the Overview report is built from data summarized by Intune, the Microsoft Graph data exports are much lighter and run much more quickly, typically just a few minutes. The Detailed report extracts significantly more data and it therefore may take significantly longer to retrieve the data from Microsoft Graph. The Detailed report will generally contain more up-to-date data, but not by a large margin.

Azure Services

As Power BI does not natively support connections to Microsoft Graph, we will use Azure automation to regularly export data from Intune using the Microsoft Graph REST APIs and save this as CSV files in Azure blob storage. Power BI supports the use of files in an Azure storage account as a data source, and the Power BI service also supports scheduled refresh on this data source, so your report can automatically stay up to date.

High-Level Process

Although we create the required Azure resources in this guide, you may wish to use resources you already have in Azure for this.

1. Create / configure an Azure automation account

2. Grant API permissions to the managed identity

3. Create / configure an Azure storage account

4. Create the Automation runbook

5. Create the Power BI report/s

Requirements

• A working Patch My PC for Intune installation with apps / updates / custom apps created and assigned

• Some familiarity with Azure administration

• Some familiarity creating Power BI reports

• PowerShell knowledge

• Appropriate permissions to create / configure the Azure resources