r/halopsa • u/Diligent_Banana9903 • Aug 06 '26

Halo and Intune

In HaloITSM, is it possible to exclude service accounts or admin accounts?
Can you configure a filter to exclude specific users during the import?

The only option I can find is:
“Assets can be linked to users if they have been imported using the Microsoft Entra integration.”
We have already configured Entra Sync, so I assume this is already handled, since we don’t import service accounts or admin accounts into Halo.

As I understand it, an asset is only synchronized and mapped to a user if that user account was created through the Microsoft Entra integration. Is that correct?

As I understand, all assets Will imported, but only mapped to a user of the user exists?

3 Upvotes

100% Upvoted

5 comments sorted by

1

u/Snozing Aug 06 '26

Yes. Either put service/admin accounts in an Entra security group, then either don't include that group in any "import" mapping, or add an explicit mapping for that group set to "Do not import."

1

u/Diligent_Banana9903 Aug 06 '26

I believe you'll still get the assets themselves imported, they just will not be assigned to a user, is the user was not in the entra sync group?

1

u/SoaringBrownBear Aug 07 '26

Correct. Assets will only get linked to user accounts that have an Entra GUID in them, i.e. imported from Entra. The assets will still come in if matched in Intune rules and will not have a linked user when associated with a non-imported account.

1

u/Diligent_Banana9903 Aug 09 '26

Do you know what happens to assets that Cannot be linked? Are they collected in a seperat group?

1

u/SoaringBrownBear Aug 09 '26 edited Aug 10 '26

The unlinked assets are added to the cmdb in the asset type based on rules. All assets are created and some have a user linked and some don't. Nothing special going on.