Event banner
Event details
With the Intune Administrator role is there a way to limit what devices can be managed? We have 2 IT departments, and they will most likely need to have some users with Intune Administrator in the same tenant. The goal is to keep the IT departments from being able to manage each other's devices. Is this possible with Scope tags, Admin units or both? Or is it something else or not possible? Thanks.
Good Morning/Afternoon/Evening,
You can leverage role-based admin controls (RBAC) to help in this scenario. This page should hopefully provide the details you need: https://learn.microsoft.com/en-us/mem/intune/fundamentals/role-based-access-control.
I believe you can also employ device limit restrictions to help determine which devices are managed by specific users.
