# Device Inventory Manager

> The inventory of every company device, built on Microsoft Intune.

CyberGuard Device Inventory Manager reads the devices managed by Microsoft Intune, enriches them with the data collected by the CyberGuard agent, and keeps in one place what Intune does not know: warranties, rental contracts, assets, assignments to employees and devices outside Intune. This guide explains how to use it, step by step.

- **Devices**: Every device with hardware, security and network details, editable fields, attachments and history. Extra devices for everything outside Intune.
- **Agents**: The CyberGuard agent for Windows and macOS, deployed with Microsoft Intune: hardware, applications, updates, drivers and software usage.
- **Warranty**: Warranty dates for the whole fleet, retrieved from the manufacturer, with expiry alerts by email.
- **Rentals & Assets**: Operational lease contracts and company assets, with the Fleet Assessment to decide what to redeem or return at contract end.
- **Staff Management**: HR requests, onboarding and offboarding of employees, with the devices to prepare or collect.
- **Fleet Insights**: Compliance, updates, drivers and applications across the fleet, with known vulnerabilities (CVE) and software metering.
- **Import & Export**: CSV files to load warranties, rentals, extra devices and inventory assets, and to extract any list.
- **Inventory**: Software licenses, SIM cards, subscriptions and other non-hardware assets, assigned to people and devices.
- **Networking**: Network devices discovered by the optional probe, and IP address management.
- **Administration**: Users and permissions, device visibility, email notifications, audit log, MSP access and multi-tenant.

## Pages

- [Getting Started](https://wiki.cyberguard.srl/dim/getting-started.md): CyberGuard Device Inventory Manager keeps the inventory of every device in your company in one place: the devices managed by Microsoft Intune, with the detailed data collected by the CyberGuard…
- [Portal Reference](https://wiki.cyberguard.srl/dim/getting-started/portal.md): Open the portal and click Sign in: you use your Microsoft Entra work account, the same as for Microsoft 365. There is no separate password.
- [Dashboard](https://wiki.cyberguard.srl/dim/getting-started/dashboard.md): The Dashboard is the first page you see after signing in. It has two tabs: General, an overview of the fleet, and Features, the entry point to every area of the portal.
- [My Tenant](https://wiki.cyberguard.srl/dim/administration/my-tenant.md): My Tenant in the sidebar opens the page of your organization. It is visible to tenant administrators and is where Device Inventory Manager is configured for everyone in your company.
- [Users & Permissions](https://wiki.cyberguard.srl/dim/administration/users-and-permissions.md): People sign in to Device Inventory Manager with their Microsoft Entra work account. You do not create users in the portal: a user appears the first time they sign in, and an administrator decides…
- [Device Visibility (RBAC)](https://wiki.cyberguard.srl/dim/administration/device-visibility.md): Permissions decide what a user can do; visibility groups decide which devices they see. Use them when different teams look after different parts of the fleet: for example, the Milan help desk sees…
- [SMTP](https://wiki.cyberguard.srl/dim/administration/smtp.md): Device Inventory Manager sends emails to your people: expiry alerts, scheduled exports, new users to approve, onboarding and offboarding confirmations for employees. These emails leave from your…
- [Email Notifications](https://wiki.cyberguard.srl/dim/administration/email-notifications.md): Device Inventory Manager can tell you by email when something needs attention, and send you the portal lists on a schedule. You choose which emails are sent and who receives them.
- [Audit Log](https://wiki.cyberguard.srl/dim/administration/audit-log.md): The audit log records what people do in the portal on your organization's data: who signed in, which pages and devices they opened, what they imported, exported, changed or deleted. Use it to…
- [MSP Access](https://wiki.cyberguard.srl/dim/administration/msp-access.md): MSP Access lets a managed service provider (MSP), the IT partner that looks after your devices, see your data in Device Inventory Manager in read-only mode, using its own account.
- [Multi-Tenant](https://wiki.cyberguard.srl/dim/administration/multi-tenant.md): A group of companies often has one Microsoft Entra tenant per company: the parent company, its subsidiaries, a branch abroad. Multi-Tenant collects the devices of all these tenants in a single…
- [Agents](https://wiki.cyberguard.srl/dim/agents.md): Microsoft Intune tells Device Inventory Manager which devices you have and how they are configured. The CyberGuard DIM agent adds what Intune does not collect: detailed hardware, firmware and…
- [Windows with Microsoft Intune](https://wiki.cyberguard.srl/dim/agents/windows-intune.md): On Windows the agent is deployed as a Win32 app: one package with the agent, its installer and your config.dat, assigned to a group of devices.
- [macOS with Microsoft Intune](https://wiki.cyberguard.srl/dim/agents/macos-intune.md): On macOS the agent is deployed in two parts, both assigned to the same group of Macs:
- [Other Deployment Tools](https://wiki.cyberguard.srl/dim/agents/other-tools.md): The agent does not depend on Microsoft Intune. Any tool that can copy files to a computer and run a command with administrator rights can install it: the steps are always the same.
- [Devices](https://wiki.cyberguard.srl/dim/devices.md): The Devices area is the heart of Device Inventory Manager: one list with every PC, Mac, phone and tablet of your company, and a page for each device with everything known about it.
- [Device List](https://wiki.cyberguard.srl/dim/devices/device-list.md): Open Devices from the Dashboard or the sidebar. The General tab lists the devices synchronized from Microsoft Intune.
- [Device Details](https://wiki.cyberguard.srl/dim/devices/device-details.md): Click a device in the Device List to open its page. The header shows the device name and two buttons:
- [Device Tab](https://wiki.cyberguard.srl/dim/devices/device-details/device-tab.md): The Device tab opens by default. It brings together what Microsoft Intune and the CyberGuard agent know about the device, in cards.
- [Performance](https://wiki.cyberguard.srl/dim/devices/device-details/performance.md): The Performance tab shows how a Windows device behaves over time. The data comes from Endpoint analytics in Microsoft Intune.
- [Apps, Updates & Drivers](https://wiki.cyberguard.srl/dim/devices/device-details/software.md): Four tabs of the device page describe its software.
- [Certificates](https://wiki.cyberguard.srl/dim/devices/device-details/certificates.md): The Certificates tab lists the certificates on a Windows device that are expired or that expire soon. An expired certificate can stop VPN, Wi-Fi, email signing or an application from working, so…
- [Editing Device Fields](https://wiki.cyberguard.srl/dim/devices/editing-device-fields.md): Microsoft Intune knows how a device is configured, but not when it was bought, who rents it, when its warranty ends or in which office it sits. You fill in these fields on the device page, in the…
- [Extra Devices](https://wiki.cyberguard.srl/dim/devices/extra-devices.md): Not every device is managed by Microsoft Intune. Printers, switches, firewalls, access points, monitors, docking stations, projectors, phones given to employees without enrollment, laptops of a…
- [When a Device Leaves Intune](https://wiki.cyberguard.srl/dim/devices/device-leaves-intune.md): A device leaves Microsoft Intune more often than you might think: an employee leaves the company and the laptop is wiped and stored, a PC breaks and is replaced, a phone is returned to the leasing…
- [Discovery](https://wiki.cyberguard.srl/dim/devices/discovery.md): Device Inventory Manager synchronizes with Microsoft Intune automatically every day: new devices appear, existing devices are updated. You do not need to do anything for this.
- [Import & Export](https://wiki.cyberguard.srl/dim/import-export.md): The Import / Export page moves data in and out of Device Inventory Manager with CSV files, which you can open and edit in Excel or any spreadsheet.
- [Export](https://wiki.cyberguard.srl/dim/import-export/export.md): Open Import / Export › Export, choose what you want to export and click Export Data. The file is a CSV that opens directly in Excel.
- [Import](https://wiki.cyberguard.srl/dim/import-export/import.md): Imports fill in many devices at once from a CSV file: the warranties from a supplier's delivery note, the contracts from a leasing company's list, the tags of a whole department, a new batch of…
- [Warranty](https://wiki.cyberguard.srl/dim/warranty.md): Knowing when warranties expire lets you plan replacements and avoid paying for repairs that would have been covered. Device Inventory Manager tracks the warranty of every device, Intune and extra,…
- [Warranty Retrieval](https://wiki.cyberguard.srl/dim/warranty/warranty-retrieval.md): Typing the warranty of hundreds of devices is slow and error-prone. Warranty Retrieval asks the manufacturer for the warranty of every device, using its serial number, and writes it on the device.
- [Rentals & Assets](https://wiki.cyberguard.srl/dim/rentals-and-assets.md): Many companies rent their laptops through an operational lease, others buy them and register them as assets, many do both. Rental / Asset Management brings together the devices that have rental or…
- [Operational Lease](https://wiki.cyberguard.srl/dim/rentals-and-assets/operational-lease.md): With an operational lease, each device has a contract that starts and ends on fixed dates. Missing the end date usually costs money: extra rent, penalties, or a device returned in a hurry. Device…
- [Asset Management](https://wiki.cyberguard.srl/dim/rentals-and-assets/assets.md): For devices that your company owns, the asset fields connect Device Inventory Manager to your asset register.
- [Fleet Assessment](https://wiki.cyberguard.srl/dim/rentals-and-assets/fleet-assessment.md): Fleet Assessment gives each rented or owned device a health score from 0 to 100 and suggests what to do with it. Use it to plan replacements and to prepare the end of lease contracts.
- [Staff Management](https://wiki.cyberguard.srl/dim/staff-management.md): When someone joins the company, HR asks IT for an account and a laptop; IT prepares the devices and hands them over; when the person leaves, the devices must come back. Staff Management follows…
- [HR Requests](https://wiki.cyberguard.srl/dim/staff-management/hr-requests.md): HR uses HR Request to tell IT that people are joining or leaving, with all the details IT needs, instead of sending scattered emails.
- [Employee Onboarding](https://wiki.cyberguard.srl/dim/staff-management/onboarding.md): An onboarding records which devices a new employee receives and asks the employee to confirm receipt. It is your proof of delivery, and the starting point of the offboarding when the person leaves.
- [Employee Offboarding](https://wiki.cyberguard.srl/dim/staff-management/offboarding.md): When an employee leaves, the offboarding records the return of each device, its condition, and makes the devices available again. Nothing is lost: the history of who had each device stays on the…
- [Settings](https://wiki.cyberguard.srl/dim/staff-management/settings.md): Staff Management › Settings holds the lists used by HR requests and the email settings. It has four tabs.
- [Fleet Insights](https://wiki.cyberguard.srl/dim/fleet-insights.md): The device page tells you everything about one device. Fleet Insights turns the question around: which devices are not compliant, which miss the latest security update, where is an application…
- [Compliance](https://wiki.cyberguard.srl/dim/fleet-insights/compliance.md): The Device Compliance page shows the security settings of every device in one table: boot mode, TPM, BitLocker, firewall, antivirus, BIOS. Use it to find the devices that need attention, and to…
- [Windows Updates](https://wiki.cyberguard.srl/dim/fleet-insights/windows-updates.md): The Windows Updates page shows every update installed or failed across your Windows devices, and for each security update the vulnerabilities it fixes. Use it to answer the questions that matter…
- [Drivers](https://wiki.cyberguard.srl/dim/fleet-insights/drivers.md): Outdated or unsigned drivers are a common way into a computer. The Drivers page lists the drivers installed on your Windows devices, collected by the CyberGuard agent.
- [Applications](https://wiki.cyberguard.srl/dim/fleet-insights/applications.md): The Applications Dashboard shows every application installed in your fleet: Windows and macOS applications collected by the CyberGuard agent, and iOS and Android applications reported by Microsoft…
- [Software Metering](https://wiki.cyberguard.srl/dim/fleet-insights/software-metering.md): Installed is not the same as used. Software Metering measures which programs are actually running on your Windows PCs, so you can find licenses that nobody uses and plan renewals on real data.
- [Statistics](https://wiki.cyberguard.srl/dim/fleet-insights/statistics.md): Advanced Statistics describes the fleet with charts, in four tabs:
- [Inventory](https://wiki.cyberguard.srl/dim/inventory.md): The Inventory module lets you register and track non-hardware assets: software licences, SIM cards, subscriptions, badges, anything assigned to a person or a device that your organization needs to…
- [Catalogue Management](https://wiki.cyberguard.srl/dim/inventory/catalog.md): Categories, sub-categories, and vendors used by the Inventory module live in a shared catalogue, scoped to your organization. This page covers how to manage it from Inventory → Manage Catalogue.
- [Custom Fields](https://wiki.cyberguard.srl/dim/inventory/custom-fields.md): A SIM card needs a PIN and a data cap. A software licence needs a version and an edition. A badge needs an access level. None of these belong on every asset, and none of them fit in the Notes box…
- [Import & Export](https://wiki.cyberguard.srl/dim/inventory/import-export.md): Bulk import and export of Inventory assets, using the same preview-before-confirm workflow used elsewhere in the portal.
- [Networking](https://wiki.cyberguard.srl/dim/networking.md): Laptops and desktops report to Device Inventory Manager through Microsoft Intune and the agent. Switches, firewalls, access points, printers and UPS units do not: Networking brings them into the…
- [Network Devices](https://wiki.cyberguard.srl/dim/networking/network-devices.md): The Devices tab of Networking lists the network devices of your organization: switches, routers, firewalls, access points, NAS, printers, UPS units and any other device that answers to SNMP. They…
- [Requirements](https://wiki.cyberguard.srl/dim/networking/network-devices/requirements.md): The probe runs as a Windows service on a machine of your network. It can be a server or an always-on PC, physical or virtual, as long as it can reach the networks to scan.
- [Configuring the Probe](https://wiki.cyberguard.srl/dim/networking/network-devices/configuring-targets.md): Everything the probe does is set in the portal: the networks it scans, the SNMP credentials it uses and how often it scans. You configure a probe before installing it, and you can change its…
- [Installation](https://wiki.cyberguard.srl/dim/networking/network-devices/installation.md): The probe is a single executable, CyberGuard-NetworkProbe.exe, signed by Inside Technologies Srl. It installs itself with an installation code that you generate in the portal: no scripts, no…
- [Managing Probes](https://wiki.cyberguard.srl/dim/networking/network-devices/management.md): Probe Info, at the top of Networking › Devices, shows every probe with:
- [Troubleshooting](https://wiki.cyberguard.srl/dim/networking/network-devices/troubleshooting.md): Look at the exit code and the message of the --install command (see Installation).
- [IPAM](https://wiki.cyberguard.srl/dim/networking/ipam.md): IPAM (IP address management) is the catalog of your networks and of the IP addresses they use. It answers everyday questions: which address can I give to the new printer, who is using 10.0.10.25,…
- [Query Explorer](https://wiki.cyberguard.srl/dim/query-explorer.md): Query Explorer is an interactive query interface built into CyberGuard Device Inventory Manager. It lets authorized users search, filter, and analyze device management data across all synchronized…
- [Query Examples](https://wiki.cyberguard.srl/dim/query-explorer/examples.md): The following examples cover the most common use cases. Each query can be copied directly into the Query Explorer editor and run as-is, or adapted to your needs.
- [Exporting Results](https://wiki.cyberguard.srl/dim/query-explorer/export.md): After running a query, Query Explorer lets you export the full result set in two formats: JSON and CSV. Both export all matching rows — not just the current page — up to the 1000-row limit.
- [API](https://wiki.cyberguard.srl/dim/api.md): The API lets your own systems read your Device Inventory Manager data: Power BI reports, a SIEM, inventory scripts. Access is read-only and limited to your tenant.
- [Authentication](https://wiki.cyberguard.srl/dim/api/authentication.md): The API uses OAuth 2.0 client credentials, the same standard used by Microsoft Graph for app-only access.
- [Endpoints](https://wiki.cyberguard.srl/dim/api/endpoints.md): All endpoints are read-only and return JSON. Dates are in UTC, ISO 8601 format (for example 2026-10-14T09:05:48Z).
- [Power BI](https://wiki.cyberguard.srl/dim/api/power-bi.md): Power BI's Web connector cannot request an OAuth token on its own. Use a Power Query that requests the token and downloads all the pages of data.
