The one script that writes: enriching Lenovo warranty into device Notes
Lenovo warranty isn't a field Intune gives you — so this tool looks it up by serial number and writes it into each device's Notes, where the read-only inventory collector and Power BI can then simply read it. It's also the one deliberate exception in this project: everything else is read-only by construction, with no write scope anywhere in the chain, but this single, human-run, opt-in tool does write to the tenant. It's fenced off in tools/ on purpose, and being honest about it is the whole point.