Forum Discussion
Ali Fadavinia
Apr 30, 2021Iron Contributor
Intune 403 error - When accessing InTune Portal
Hi Intune Community, I have two users who I have given them the Application Manager role with full access, under Tenant Admin --> MEM roles but they are receiving following access error when they...
- May 03, 2021Hi.
the microsoft documentation is a little bit hard to read. But yes indeed... just like the screenshot I posted.. All devices/All users otherwise it is not going to work
Ali Fadavinia
May 03, 2021Iron Contributor
I think I figure out what is going on:
I checked the definition between Members & Scope for my role(application manager) :
Members: All users in the listed Azure security groups have permission to manage the users/devices that are listed in Scope (Groups).
Scope (Groups): All users/devices in these Azure security groups can be managed by the users in Members.
So, for Members it should be the group I wanna give the power/privileges to
but for Scope: it should be all devices, all users [ not limited to the assigned group - this is where I was doing wrong ]
Now, the users can access to Endpoint Manager
I checked the definition between Members & Scope for my role(application manager) :
Members: All users in the listed Azure security groups have permission to manage the users/devices that are listed in Scope (Groups).
Scope (Groups): All users/devices in these Azure security groups can be managed by the users in Members.
So, for Members it should be the group I wanna give the power/privileges to
but for Scope: it should be all devices, all users [ not limited to the assigned group - this is where I was doing wrong ]
Now, the users can access to Endpoint Manager
May 03, 2021
Hi.
the microsoft documentation is a little bit hard to read. But yes indeed... just like the screenshot I posted.. All devices/All users otherwise it is not going to work
the microsoft documentation is a little bit hard to read. But yes indeed... just like the screenshot I posted.. All devices/All users otherwise it is not going to work