Power Admin
A native macOS dashboard for Microsoft Intune — device counts, compliance, OS end-of-life and orphaned accounts across all your tenants, at a glance. No portal hopping. No interactive sign-in.
macOS 14 or later · Free for one tenant · Pro from $24.99/mo
Not affiliated with Microsoft.
Managing more than one Microsoft Intune tenant is painful. Each tenant means another sign-in, another portal tab, another context switch. Microsoft's own cross-tenant tooling (Lighthouse) only works for CSP/GDAP relationships and is limited in scope. So MSPs, consultants and admins running multiple tenants end up logging in tenant-by-tenant just to answer simple questions: how many devices? How many are non-compliant? What's running an end-of-life OS? Whose device belongs to someone who already left?
Power Admin for Intune answers all of that from one native Mac window.
See all tenants side by side — total devices, non-compliant count, unsupported-OS count and orphaned accounts, plus a per-tenant OS breakdown. Your whole estate in one screen.
Every device's OS is checked against the endoflife.date database and labelled Supported, Security-only or Unsupported, with real support and end-of-life dates. Covers iOS, iPadOS, macOS and Android; Windows mapping planned.
Lifecycle data from endoflife.date, CC BY 4.0.
The classic Intune caveat: an employee leaves, their account is deleted or disabled, but their enrolled devices linger. Power Admin cross-references every device's primary user against Entra ID and flags the orphans.
Per-tenant device list with search, compliance filter, OS-lifecycle status and one-click "orphaned only". Export any view to CSV for audits and reporting.
Device count, compliance and OS-risk plotted over time, with interactive charts. Every refresh adds a data point, so you see your fleet's direction, not just today's number.
Put each tenant on its own refresh schedule, hourly to daily. Dashboards stay current — even from the menu bar with no window open — and catch up after sleep or restart.
Permissions used (all read-only, admin-consented):
DeviceManagementManagedDevices.Read.All — device inventoryUser.Read.All (optional) — orphaned-device detectionOne tenant, forever. Overview, device list, OS-lifecycle, orphaned detection, history and CSV export — all included for a single tenant.
Unlimited tenants and per-tenant automatic refresh. Monthly ($24.99/mo) or Yearly ($249.99/yr, 2 months free) — includes 2-week free trial.
Power Admin for Intune Pro is an auto-renewing subscription that unlocks unlimited tenants and automatic refresh. The free tier remains free forever for a single tenant.
Subscriptions are billed through the App Store and can be cancelled anytime. Payment charged to your Apple Account at confirmation. Manage in System Settings → Apple Account → Media & Purchases.
No. It's strictly read-only and requests no write permissions.
No. It uses an app-only (client-credentials) Entra registration, so there's no interactive login.
In your Mac's Keychain. Nothing leaves your device except read-only calls to Microsoft Graph.
One on the free tier; unlimited with Pro.
iOS, iPadOS, macOS and Android today; Windows mapping is planned.
A device whose primary user has been deleted or disabled in Entra ID. Detecting them needs the optional User.Read.All read permission.
A tenant with an active Intune license and a read-only Entra app registration (the app walks you through it).
No — it's an independent tool from MDM Architect and is not affiliated with Microsoft.
A Microsoft Intune tenant and a read-only Entra ID app registration (Tenant ID, Client ID, client secret). macOS 14 or later, Apple Silicon or Intel.
Power Admin for Intune is an independent tool and is not affiliated with, endorsed by, or sponsored by Microsoft. "Microsoft Intune" and "Microsoft Entra" are trademarks of Microsoft Corporation.
How the app handles your data.
End User License Agreement.
Need help? Submit a ticket or browse FAQ.
Also part of the Power Admin family: Power Admin Warden · Power Admin Desktop · Power Admin Mobile