Tenant attach: Launch CMPivot from the admin center

Applies to: Configuration Manager (current branch)

Bring the power of on-premises CMPivot to the Microsoft Endpoint Manager admin center. Allow additional personas, like Helpdesk, to be able to initiate real-time queries from the cloud against an individual ConfigMgr managed device and return the results back to the admin center. This gives all the traditional benefits of CMPivot, which allows IT Admins and other designated personas the ability to quickly assess the state of devices in their environment and take action.


The following items are required to use CMPivot from the admin center:

  • All of the prerequisites for Tenant attach: ConfigMgr client details
  • Upgrade the target devices to the latest version of the Configuration Manager client.
  • Target clients require a minimum of PowerShell version 4.
  • To gather data for the following entities, target clients require a minimum of PowerShell version 5.0:
    • Administrators
    • Connection
    • IPConfig
    • SMBConfig


The user account needs the following permissions:

  • The Read permission for the device's Collection in Configuration Manager.
  • The Run CMPivot permission on the Collection in Configuration Manager
  • An Intune role assigned to the user

Launch CMPivot

  1. In a browser, navigate to https://endpoint.microsoft.com.
  2. Select Devices then All Devices.
  3. Select a device that is synced from Configuration Manager via tenant attach.
  4. Select CMPivot.
  5. Type your query in the script pane, then select Run.

Close CMPivot

To close CMPivot and return to the device information, use the X icon in the top right of CMPivot.

Close CMPivot with the X icon in Microsoft Endpoint Manager admin center

Next steps