SnapTune for Intune2.3

SnapTune is the fastest way for IT admins to manage Microsoft Intune devices from an iPhone or iPad. Search any enrolled device, pull live hardware details, retrieve BitLocker recovery keys and LAPS credentials, and trigger remote actions - all in a clean, native interface built for one-handed use.

WHO IT'S FOR
IT administrators, helpdesk technicians, MSPs, and security engineers who manage Microsoft Intune / Entra ID tenants and need quick mobile access without firing up the admin center on a laptop.

CORE FEATURES

. Universal device search - find any enrolled device by name, user, serial, or IMEI in a single search box.
. Live device details - OS, compliance, encryption, enrollment date, last check-in, primary user, and full hardware specs from Microsoft Graph.
. BitLocker recovery keys - surface keys instantly when a user is locked out. Audit-friendly: every retrieval is logged in Entra.
. Windows LAPS credentials - retrieve the rotating local admin password without leaving the device card.
. Remote actions - sync, restart, rename, retire, wipe, and more, with confirmation guards on dangerous operations.
. Reports dashboard - enrollment, platform distribution, compliance status, and management coverage at a glance.
. In-app PIM activation - activate Privileged Identity Management roles directly inside SnapTune. No browser hand-off, no second sign-in.
. AI-powered Device Health (iOS 26+) - on-device language model summarizes device health and flags anomalies. All processing stays on your iPhone - no data leaves the device. (AI features are experimental and may produce inaccurate results.)
. Demo Mode - full preview of every screen with realistic mock data, perfect for trials, training, and screenshots.

SECURITY

. Authenticates with your real Microsoft Entra ID account via MSAL
. Supports Microsoft Authenticator broker for single sign-on across Microsoft apps.
. Optional Face ID / Touch ID app lock with auto-lock on backgrounding.
. Critical action protection - destructive operations (wipe, retire) require a second confirmation.
. No analytics, no third-party trackers, no data collection. Everything runs against your tenant's Graph API directly.

REQUIREMENTS

. A Microsoft Entra ID tenant with Intune.
. An Entra app registration with delegated Graph permissions (a one-time setup; in-app guide included).
. iOS 17 or later. AI Device Health requires iOS 26 or later.

NOT AFFILIATED WITH MICROSOFT

SnapTune is an independent companion app and is not affiliated with, endorsed by, or sponsored by Microsoft Corporation. "Microsoft," "Intune," and "Entra" are trademarks of Microsoft Corporation.

Questions or feedback? Tap Settings → Send Feedback inside the app.

Version History Activate PIM roles without leaving SnapTune
The new Roles screen lists every eligible and active Privileged Identity Management assignment. Tap to activate with a reason and duration, tap again to deactivate. SnapTune now waits for Microsoft to apply the role to your session before returning you to Search, so the elevated permissions are ready the moment you need them.

Tell us how we're doing
• Send Feedback from Settings — bug reports, feature ideas, and questions go straight to the team.
• Rate the AI device-health summary with a thumbs up or down right on the device card. Your verdicts help improve the model.
• An occasional check-in asks whether SnapTune is working for you. If it isn't, we'd rather hear about it than see a one-star review.

AI-powered Device Health (iOS 26 and later)
On-device intelligence summarizes the state of any device you open, with prioritized findings underneath. Everything runs on your iPhone — nothing leaves the device. AI features are experimental; always verify against the underlying findings.

Reports dashboard
Enrollment totals, platform distribution, compliance status, and management coverage at a glance. The compliance section now renders correctly on tenants with empty buckets instead of falling back to "unavailable."

Platform-aware device details
Hardware and storage sections adapt to Windows, macOS, iOS, and Android. Android storage is no longer surfaced where Intune doesn't report it reliably.

Also in this release
• SnapElevate, the full PIM companion (approvals, history, favourites, PIM for Groups, expiry alerts), is now described in the Roles screen with a one-tap hand-off when installed.
• The browser-based Entra PIM option has been removed in favour of in-app activation.
• Microsoft Authenticator broker sign-in is the default path; interactive sign-in only appears when truly needed.
• App Lock overlay is now fully opaque.
• Settings can be closed cleanly when API fields are blank, and turning off Demo Mode clears stored tenant details.
• Privacy manifest added; no analytics or third-party trackers.

Not affiliated with Microsoft. Microsoft, Intune, and Entra are trademarks of Microsoft Corporation. 2.3 Sep 29 What's New (release notes, 4000 chars max)
• New: Activate PIM roles without leaving SnapTune. The Roles screen lists every eligible and active assignment — tap to activate with justification, tap again to deactivate.
• New: AI-powered Device Health on iOS 26+. On-device intelligence summarizes the state of any device you open. Fully private.
• New: Reports dashboard. Enrollment hero, platform distribution, compliance status, and management coverage at a glance.
• Improved: Hardware details now adapt to platform
• Improved: Sign-in flow streamlined — interactive sign-in only happens when truly necessary; broker SSO is the default path.

Pair With SnapElevate for even better PIM controls. 2.1 May 15 Small tweaks to performance and support for app config deployments 2.0.2 06/05/2025 What’s New in This Version

This update includes security upgrades, Windows enhancements, and interface improvements based on real-world feedback.

Security & Privacy
- Biometric App Lock: Secure SnapTune with Face ID, fingerprint, or device passcode
- Inactivity Timeout: Automatically sign out after 1 to 60 minutes of inactivity
- Lock Critical Actions: Adds an authentication step before running sensitive commands
- API Settings validation

Windows Device Enhancements
- BitLocker Recovery: View, copy, and share recovery keys in a full-screen UI (requires extra permissions – see setup guide)
- LAPS Password Recovery: Secure view of local admin passwords
- Wipe Pending: Now clearly shown on the device detail screen
- Full-screen recovery tools: No more cramped sheets

General Improvements
- Smarter Setup from Image flow using OCR
- Improved image picker and setup guide experience
- Consistent SF Symbols used throughout for a cleaner look

UI and Experience
- Search by category with wildcard fallback
- Settings screen redesigned — no more app restarts
- Unified layout and icon styling
- Better layout and spacing on iPad 2.0.1 04/11/2025 What’s New in This Version

This update includes security upgrades, Windows enhancements, and interface improvements based on real-world feedback.

Security & Privacy
- Biometric App Lock: Secure SnapTune with Face ID, fingerprint, or device passcode
- Inactivity Timeout: Automatically sign out after 1 to 60 minutes of inactivity
- Lock Critical Actions: Adds an authentication step before running sensitive commands

Windows Device Enhancements
- BitLocker Recovery: View, copy, and share recovery keys in a full-screen UI (requires extra permissions – see setup guide)
- LAPS Password Recovery: Secure view of local admin passwords
- Wipe Pending: Now clearly shown on the device detail screen
- Full-screen recovery tools: No more cramped sheets

General Improvements
- Smarter Setup from Image flow using OCR
- Improved image picker and setup guide experience
- Consistent SF Symbols used throughout for a cleaner look

UI and Experience
- Search by category with wildcard fallback
- Settings screen redesigned — no more app restarts
- Unified layout and icon styling
- Better layout and spacing on iPad 1.2.0 04/08/2025 updated screen shots, squashed a few bugs 1.1.3 03/05/2025 1.0 03/03/2025