Limit permissions on admins

Jesper Stein

We have a lot of users that needs to be Global Admins to be able to go in and wipe/delete mobile devices in Office 365 (intune).

I want to limit their permissions so that they no longer are Global Admins, but I can not find a description on what permissions they need. Anyone have limited admins that can manage mobile devices in 365?

1 Reply

Limiting Global Admins is a good idea! There are roles driven by Azure AD, have you seen them, if they are relevant like Intune Service Administrator. 


Using the New Role Based Access Controls in Intune


Role-based administration control (RBAC) with Intune


Assigning administrator roles in Azure Active Directory


The first link has a table with Intune Role Permissions. 

Related Conversations
Restrict Channel Creation
myintuition in Microsoft Teams on
2 Replies
Admin Testing News Audience Targeting not working (?)
Kaylee Goss in SharePoint on
1 Replies
Frequency for reviewing permissions
Niki Felker in SharePoint on
1 Replies
Authenticate Lists based in list fields
hy1hy1 in SharePoint on
4 Replies