Public mode

No access to your tenant or devices. Every item links to its source. What this means

Customize Public modeDiscuss ChangeIntel on Discord

Microsoft's edit ·

Clarify BitLocker recovery access after Autopilot ownership changes

Microsoft's commit message in MicrosoftDocs/entra-docs · commit 608d623 · +3 −3 lines · also on GitHub

Source wording view
⋯ 1 unchanged line
22 title: Manage devices in Microsoft Entra ID using the Microsoft Entra admin center
33 description: This article describes how to use the Microsoft Entra admin center to manage device identities and monitor related event information.
44 ms.topic: how-to
5 −ms.date: 06/17/2026
5 +ms.date: 11/12/2026
66 ms.reviewer: myra-ramdenbourg
7 −ms.custom: sfi-image-nochange
7 +ms.custom: sfi-image-nochange, msecd-doc-authoring-1030
88 ---
99 # Manage device identities using the Microsoft Entra admin center
1010
⋯ 88 unchanged lines
9999 - [Security Reader](../role-based-access-control/permissions-reference.md#security-reader)
100100
101101 > [!NOTE]
102 −> When devices that utilize [Windows Autopilot](/mem/autopilot/windows-autopilot) are reused, **and there is a new device owner**, that new device owner must contact an administrator to acquire the BitLocker recovery key for that device. Custom role or administrative unit scoped administrators will continue to have access to BitLocker recovery keys for those devices that have undergone device ownership changes, unless the new device owner belongs to a custom role or administrative unit scope. In such an instance, the user will need to contact other scoped administrator for the recovery keys. For more information, see the article [Find the primary user of an Intune device](/mem/intune/remote-actions/find-primary-user#change-a-devices-primary-user).
102 +> When devices that utilize [Windows Autopilot](/mem/autopilot/windows-autopilot) are reused, **and there is a new device owner**, that new device owner must contact a non-device owner administrator to acquire the BitLocker recovery key for that device, even if the new device owner is an admin. Custom role or administrative unit scoped administrators will continue to have access to BitLocker recovery keys for those devices that have undergone device ownership changes, unless the new device owner belongs to a custom role or administrative unit scope. In such an instance, the user will need to contact other scoped administrator for the recovery keys. For more information, see the article [Find the primary user of an Intune device](/mem/intune/remote-actions/find-primary-user#change-a-devices-primary-user).
103103
104104 ## View and filter your devices
105105
⋯ 128 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 13 Nov 06:55 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 15 Nov 00:38 UTC · 256 of 275 readable · 254 fully read · documentation 469/469 current