Forum Discussion

Luis_Antonio_Marquez's avatar
Luis_Antonio_Marquez
Copper Contributor
Jan 21, 2021

Powershell and credentials

Probably this is a very common topic. I would like to supply some scripts to the support team, that should run with very high privileges, but I don't want them to have those privileges.

Can anyone help me with some advice about the best approach?

 

Thanks,

 

Luis.

  • Thijs Lecomte's avatar
    Thijs Lecomte
    Bronze Contributor
    Jan 21, 2021
    What kind of tasks are you talking about?

    You would need to build some kind of interface so that users do not get the credentials, but this depends entirely on the use case
    • Luis_Antonio_Marquez's avatar
      Luis_Antonio_Marquez
      Copper Contributor
      Jan 22, 2021

      Thijs Lecomte , first thanks for your answer.

      They are tasks related to the user and device management. Usually, they would require Intune Administrator, Device Administrator, User Administrator roles but definitely, they are too powerful to be assigned. Now they are working using PIM, but anyway I feel it would be great to let an application do the job with appropriate permissions, and let the Support Team work with minimum privileges.  That said, any recommendations are very welcomed. I feel a bit lost.

Resources