The read-only AI agent that can't touch your tenant

"How many devices fail Firewall in Finland?" "Which Lenovos are out of warranty in the Madrid office?" "Is Ollama installed anywhere, and is it approved?" You want to ask your fleet those questions in plain English and get an answer in seconds. The obvious way to build that — hand an AI model live access to Intune and Microsoft Graph — is also the most dangerous. This is the capstone of everything on this site: an AI agent for endpoint management that answers questions about your whole Intune fleet — and holds no access to any live system at all. (For how it compares to Microsoft's native Intune Copilot agents, jump to Where this fits.)