Event details
170 Comments
- The cumulative / additive nature of role assignments is limiting in larger / distributed environments - not being able to delegate greater privs on one scope, but lesser privs on another scope is unfortunate.
Is there any way to report the Last Logged In User on a device?
- In the device, I would like to be able to see what Proactive Remediations are assigned.
- To expand on that, I would like to be able to see anything touching that device, be it groups, PRs, Scope Tags, Filters, Group Names, etc. A full device profile.
- I'd love to see the ability to assign categories for devices in Intune and have the user not be able to change it or have it not pop up when they open the company portal the first time.
- Scott Duffey
Microsoft
This is a great suggestion. We are actually working on a customization policy setting that can be used hide category prompts from users if you'd like this to happen. Current timeline is Q1 23 (subject to change).- Glad to hear it Scott. We completely abandoned categories thanks to this popup that was confusing users during enrollment (and in some cases leading to issues, like if they mis-clicked or chose wrong). If that problem were abated by making it optional, we'd be able to use categories again!
Scope tags. Will it be possible to assign certain OS management, let's take iOS. And use scope tags or RBAC to assign a full os layer including the creation of profiles and policies to a group of admins? Maybe it is better to call it delegation on control for a full OS, including everything around that OS.
- Any plans to honor scope tags in the Intune Graph APIs so admins can't bypass the scoped RBAC we've setup in the Intune console by just using Graph calls?
- Scott DuffeyIntune UX is built on top of Graph API's, which do consider scope tags and RBAC. If you are seeing issues with this please do raise a support ticket with us.
- On that Intune / MDE integration: MDE Plan 2 also has a good engine to detect applications and missing CVEs on a device. It would be great if Intune 3rd party app update feature would come to the same result by scanning the same device
- or in best case uses the same scanning engine
- Can we get the ability to create folders in the Apps section? Right now in the Configuration Manager Console we have all of our applications broken up into different folders for ease of searching for a specific application. We are looking into migrating our apps to Intune, and having a similar structure will make the transition nicer for my team members.
Are there any plans on bringing the office Config portal experience into the Intune Admin Portal, Microsoft 365 Apps is one of the primary things an Admin configures and deploys? A lot of the Portals seem to be separate even though it is something we will need to deploy to an endpoint.
- But to his point, the Settings Catalog and even using Admin Templates without a "catalog" of what is available to choose from is painful.
