Forum Discussion
App-Approval for Apps assinged via Intune
Hey there,
when deploying Apps via Configuration-Manger (SCCM) there is an Option "An Administrator must approve a request for this application on the Device" where you also got an option for Mail Notification to Approvers:
Configuration Manager App-Approval
Do you know if there is an equivalent Feature when assigning Intune-Apps to Users? Or is there an alternative Method to reach the same result?
Company Portal can handle Approvals from Configuration Manger:
Company Portal App ApprovalWondering if there is a "Intune-Native" way?
Looking forward to your answers.
6 Replies
Correct me if I'm mistaken, you want to grant approval rights to "specific" users to do it on behalf of the admin.
Assign an Intune RBAC Role to the Specific user.
Either the built-in role "Application Manager" or a custom role for app requests approval permissionsHi,
no we want to deploy Apps so that users are not allowed to install it right away, but an admin has to approve the installation. So users should be able to hit a "Request" Button instead of "Install" and an Administrator has to approve (or decline) it. It's working like charm in Configuration Manager.
I do not believe there is a similar function in Intune just like in SCCM, this could be a one for the MS Intune Feedback https://feedbackportal.microsoft.com/feedback/forum/ef1d6d38-fd1b-ec11-b6e7-0022481f8472
Too bad, this would be a great feature.
I added this to the feedback page - feel free to upvote this:
Hi, as far as I know, there isn't a native configuration like the one in ConfigMgr. However, you could achieve something similar through the Company Portal under "Help & Support" by adding a link for user requests that connects to your ticketing system. A flow similar to this maybe:
Ticket created → Admin approves → API call to add user to group → App deployment
Alternatively, you could use Azure Logic Apps with an HTTP trigger, following a similar approach to the first example.
Good luck!
Thanks for giving this idea for a workarround. It's a pitty there is no native way. Building this workarrounds is not convient neither for admins nor for users.
