Microsoft Entra built-in rolePublic reference
Intune Administrator
Can manage all aspects of the Intune product.
Explicit references to this role
These items name the role, a previously observed name, or its template GUID. A text reference does not establish impact, an assignment, or equivalent permissions. Connections use the current collected items.
- Escalating Privileges as a Catalog Owner: How Microsoft Entra Identity Governance’s API Permission Management Could Be AbusedThomas Naunheim (cloud-architekt.net) · explicit role reference
- Intune Remote Help – The Deep Dive Now That It’s Included In Your E5MSEndpointMgr · explicit role reference
- Intune assignment filters for every in-support Windows buildMSEndpointMgr · explicit role reference
- Exporting all Microsoft Intune Enterprise App Management catalog apps to CSV using Microsoft GraphMicrosoft Intune Blog · explicit role reference
- Extending AD CS attack surface to the cloud with Intune certificatesDirk-jan Mollema · explicit role reference
- MC1489971 · Microsoft Purview DLP: Improved setup and Intune multi-admin approval support for unmanaged apps in Edge for BusinessReturned by 2 reference tenants · Corroborated by Microsoft 365 Message Center Archive by Merill FernandoExplicit role reference; verify applicability in your tenant
- MC1481310 · Pin Copilot app to Windows taskbar for selected user groupsMicrosoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.Explicit role reference; verify applicability in your tenant
- MC1269217 · Microsoft Purview compliance portal: Endpoint DLP expands protection to Copilot PC Recall snapshotsMicrosoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.Explicit role reference; verify applicability in your tenant
- MC1115296 · Microsoft Security Copilot in Intune is now generally available with new ways to explore and act on your Intune dataMicrosoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.Explicit role reference; verify applicability in your tenant
Microsoft's role reference · Explore the separate Graph OAuth permission catalog. Resource actions do not establish an OAuth-scope mapping.