Device admin

[Harry Dubois]

We have enrolled devices in Intune; the user is a non-admin user. When the user want to install a program, a popup screen is coming up asking the AAD admin user credentials. 

I want to assign a role to a helpdesk user to be this local admin user, but this role is not available in Intune, although the documentation from MS speaks about an 'device administrator'. 

How can assign this role to an non-admin AAD user?

[#2 · Accepted solution]

A device administrator is not a local administrator on your device.
In Azure, device settings you can add users which will be local admin on your Azure AD joined devices.
Or have a look at this article http://www.scconfigmgr.com/2018/08/30/configure-restricted-groups-with-intune-policy-csp/

[#3]

Great answer Peter, thnx!