Accessing App Management
You can edit installation information using the management options.
Go to the Apps Management page by selecting Incident IQ Apps > Manage on the left navigation bar.
Locate your desired MDM application and select Manage to the right.
Overview Tab
Use this tab to manage authentication and review sync performance.
Status Section
Displays the validity of your current authentication token.
Use the Options button to re-authenticate or remove console access credentials.
Sync Section
View Detailed Log: Opens the history of the last scheduled sync.
Start Full Sync: Manually trigger a new sync.
Re-Run Last Sync: Repeat the most recent sync process.
Push Data: Send data directly to the MDM integration
The Microsoft Intune integration now supports a broader selection of device custom fields through the Intune Data Warehouse. Learn more here.
General Settings Tab
This tab controls automatic sync triggers, field mappings, and integration behaviors.
Mapping Section
Create Asset: Automatically creates an iiQ asset for every new device discovered during a sync.
Update Asset: Automatically updates existing iiQ assets based on new data discovered during a sync.
Update Custom Fields: Updates only new custom field data during a sync.
Delete Asset: Automatically delete an iiQ asset during a sync if removed from the integration.
Import Options Section
Create Rooms Option: Enabling this will automatically create rooms for assets found in the integration if they do not already exist in iiQ.
Matching Rules Section
This section controls how devices are matched. These rules are read-only for customers (editable by iiQ Admin Employees):
Use the serial number as the primary matching identifier.
Prefer the serial number over the asset tag.
Skip creation if the Google asset lacks a serial number.
Allow only one asset per serial number.
Restore deleted assets if a match is found.
Map Custom Values Section
Map additional values to default or custom fields in iiQ:
Click ‘Add’ located near the end of the section.
Please note that there may be pre-configured mappings that cannot be changed.
Select the custom value.
Set Map Direction:
MDM to Incident IQ
Incident IQ to MDM
Both directions (Data pushes from iiQ to the MDM first)
Note: The field Managed Device Name is currently supported only for syncing from iiQ to Intune.
Select iiQ Field: Map to a default or custom field. (Custom fields require a field name, type [text/number/date], and searchability settings).
MDM Options Section
Control how iiQ updates the owner field using the following drop-down options:
Don’t automatically update asset owner in iiQ: Disables owner field synchronization.
Automatically update owner in iiQ based on User ID: Updates device ownership based on the User ID field in Microsoft Intune.
Automatically update owner in iiQ based on Email Address: Updates device ownership based on the user’s Email Address in Microsoft Intune.
Automatically update owner in iiQ based on User Principal Name in Microsoft Intune: Updates device ownership based on the user’s Principal Name in Microsoft Intune.
Automatically update owner in iiQ based on Registered Owner’s Email Address in Microsoft Intune: Updates device ownership based on the Primary User Email in Microsoft Intune.
Additional Owner Options (if any automatic update is selected):
Remove the existing owner in iiQ if the MDM field is empty.
Remove the existing owner in iiQ if the MDM field cannot be matched to a valid user.
Perform Actions on Devices Section
Manage whether authorized users can remotely manage devices:
Enable remove device actions in MDM integration: Allows users with permission to perform remote device actions.
Location Mappings Tab
Manage how locations sync between Incident IQ and the integration.
Location is required for an asset to be created in iiQ.
Default Mapping Section
Set or change the default location for assets with no specific location mapped.
Custom Mapping Options
Manual Selection: Manually search for and select specific location assignments if necessary.
Map by Owner’s Location: This feature automatically assigns an asset to its owner's location. This will only be available if one of the following Site Options is enabled:
When User is Assigned an Asset: Update Asset to Match Owner’s location
When User is Assigned an Asset: Update Asset to Match Owner’s room
When User’s Location Changes: Update Asset to Match Owner’s location
When User’s Room Assignment Changes: Update Asset to Match Owner’s room
Model Mappings Tab
Select or modify model mappings to ensure devices are correctly categorized in iiQ.
Unmapped models will not be imported into iiQ.
Auto-Map Models: Attempts to match device models from your list with existing models in iiQ.
Manual Mapping: Use the drop-down menus next to each device to select the correct model.
Create New Model: If a device does not auto-map and isn't in the drop-down list, click this button to automatically create and activate the model during the next data sync.
Verification Tab
Utilize the integration login activity to verify assets for Audit Manager.
Actions:
Manual Verification: Click Start Verification to run an immediate, single-device check.
Verification Profiles: Automate verifications by creating a profile. You can run multiple profiles concurrently.
Profile Settings:
Number of days of usage to review: The login threshold required to count as "verified."
Allow Shared Devices: Verifies devices used by multiple users, provided the assigned owner meets the usage threshold.
Schedule: Set frequency (Once, Daily, Weekly, Monthly, Yearly) and a sunset date.
Select Assets: Apply filters to define which devices the profile targets.
You can edit, delete, or review the status of existing profiles at the bottom of the page.
Sync History Tab
Provides a historical log of every synchronization attempt between iiQ and the integration.
Sync Details: Clicking any entry in the list displays a breakdown of the sync, including which devices were updated, created, deleted, or skipped.
Audit Filtering: Use the filter options at the top of the list to narrow your review by status or time.
Asset History Tab
Searchable database of basic device information found in the integration.
Search: Enter a valid serial number to retrieve specific device information.
Available Metadata:
External ID
Model
Owner Email
Organizational Unit
Serial Number
Location Name
Action Log: View a history of actions applied to the device during recent system syncs.
Remote Device Actions
Found within the General Settings tab at the bottom of the page, you can enable remote device management, allowing authorized administrators and agents with the correct permissions to interact with devices directly from the asset’s details page in Incident IQ.
Available Actions
Restart Device
Shut Down Device
Remote Lock
Retire Device
Sync Device
Locate Device
Disable Lost Mode
Wipe Device
Clean Device
Update Defender
Defender Scan
Request Assistance
Recover Passcode
Reset Passcode
Bypass Lock
Update Account
Sign Out User
Remove User
You can perform actions on the asset details page.
Configuration & Permissions Notes:
Default Access: Administrators are granted full access to all remote feature permissions by default.
Granular Control: Each remote feature listed above is controlled by an individual permission, allowing for customized access levels per agent.
Permission Management: Configure these settings under the App Specific section on the policies and individual user permissions pages.
