Event banner
Event details
Is there a built-in bare minimum permissions for users to retrieve the LAPS password from Intune?
- LauraArrizza
Microsoft
To retrieve the LAPS password for a given device via the Intune portal or Entra portal, an admin needs to have specific permissions that allow this. You must have one of the following Microsoft Entra permissions:
- microsoft.directory/deviceLocalCredentials/password/read to read LAPS metadata and passwords.
- microsoft.directory/deviceLocalCredentials/standard/read to read LAPS metadata excluding passwords.
More details here: https://learn.microsoft.com/en-us/mem/intune/protect/windows-laps-overview#role-based-access-controls-for-laps
