specification: FinOps Framework
specificationVersion: '1.0'
schema: https://www.finops.org/framework/
alignedWith:
  framework: FinOps Foundation Framework
  frameworkUrl: https://www.finops.org/framework/
  dataSpec: FOCUS
  dataSpecVersion: '1.3'
  dataSpecUrl: https://focus.finops.org/focus-specification/v1-3/
provider: Microsoft Intune
providerId: microsoft-intune
publisherName: Microsoft Corporation
serviceCategory: Endpoint Management
created: '2026-05-04'
# Provenance stamped 2026-08-11: this artifact was written by the API Evangelist
# bulk sweep dated 2026-05-04, not harvested from the provider. See roadmap#35.
method: generated
modified: '2026-05-05'
reconciled: true
tags:
  - Endpoint Management
  - Intune
  - Microsoft
  - FinOps
  - FOCUS
description: 'FOCUS-aligned FinOps for Microsoft Intune: tiered per-user-per-month subscription (Plan
  1, Plan 2, Suite) plus per-user add-ons; Plan 1 is bundled in Microsoft 365 E3 / E5 / F3 and EMS E3
  / E5. No per-call API charge.'
sources:
  - https://www.microsoft.com/en-us/security/business/microsoft-intune-pricing
  - https://learn.microsoft.com/en-us/intune/intune-service/
billingModel:
  pricingCategory: Tiered Subscription
  billingFrequency: Monthly
  billingCurrency: USD
  chargeCategories:
    - Usage
    - Purchase
    - Tax
    - Adjustment
focusColumns:
  ServiceName: Microsoft Intune
  ServiceCategory: Endpoint Management
  ProviderName: Microsoft
  PublisherName: Microsoft Corporation
  InvoiceIssuerName: Microsoft Corporation
  BillingCurrency: USD
  ChargeCategory: Purchase
meters:
  - name: intune_seats
    description: Microsoft Intune seat licences (Plan 1 / Plan 2 / Suite or bundled M365 / EMS SKU)
    unit: seat
    aggregation: sum
    dimensions:
      - tenant
      - sku
  - name: intune_addon_seats
    description: Add-on seats (EPM, Remote Help, Advanced Analytics, Enterprise App Mgmt, Cloud PKI)
    unit: seat
    aggregation: sum
    dimensions:
      - tenant
      - addon
  - name: managed_devices
    description: Devices currently enrolled in Intune
    unit: device
    aggregation: max
    dimensions:
      - tenant
      - os
      - ownership
  - name: graph_api_requests
    description: Microsoft Graph deviceManagement API calls (no charge; tracked for throttling)
    unit: request
    aggregation: sum
    dimensions:
      - application
      - tenant
principles:
  - name: Visibility
    description: Use the Microsoft 365 admin centre licence report and the Intune admin centre device
      and compliance reports for consumption visibility; capture Graph throttling telemetry from response
      headers.
  - name: Allocation
    description: Map seat licences to Entra groups bound to cost-centres; tag enrolled devices with team
      / business-unit attributes.
  - name: Optimization
    description: Stack Plan 1 + targeted add-ons rather than the Suite when only one or two add-ons are
      needed; eliminate duplicate licensing where M365 E3/E5/F3 already includes Intune; audit enrolment
      of unmanaged or orphaned devices.
  - name: Accountability
    description: Endpoint engineering owns enrolment and policy authoring; security owns compliance baseline;
      finance owns the M365 / EMS / Intune SKU mix.
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com