Permissions Required To See Mobile Device Management for Office 365 Page

%3CLINGO-SUB%20id%3D%22lingo-sub-191597%22%20slang%3D%22en-US%22%3EPermissions%20Required%20To%20See%20Mobile%20Device%20Management%20for%20Office%20365%20Page%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-191597%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20recently%20setup%20Office%20365%20MDM%20via%20the%20Security%20%26amp%3B%20Compliance%20Centre%2C%20created%20a%20policy%20and%20are%20in%20the%20process%20of%20pushing%20the%20policy%20out%20and%20all%20was%20going%20well%20unti%20I%20tried%20to%20assign%20a%20couple%20of%20admins%20rights%20to%20manage%20the%20registered%20devices.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20admins%20in%20question%20have%20Exchange%2C%20SharePoint%2C%20Skype%20and%20User%20Managment%20admin%20rights%20but%20I'm%20unable%20to%20figure%20out%20how%20to%20gicve%20them%20rights%20for%20device%20management.%20I%20have%20tried%20to%20assign%20them%20device%20management%20rights%20in%20the%20permissions%20in%20the%20security%20and%20compliance%20centre%20and%20also%20via%20the%20Device%20Management%20admin%20role%20through%20PowerShell%2C%20but%20they%20keep%20getting%20permission%20denied%20errors%20everytime%20they%20try%20and%20open%20device%20managment.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20are%20the%20minimum%20rights%20required%20for%20device%20managment%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECheers%3C%2FP%3E%3CP%3EAndy%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-191597%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%20Administration%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-668470%22%20slang%3D%22en-US%22%3ERe%3A%20Permissions%20Required%20To%20See%20Mobile%20Device%20Management%20for%20Office%20365%20Page%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-668470%22%20slang%3D%22en-US%22%3EDid%20you%20ever%20get%20an%20answer%20for%20this%20question%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-742389%22%20slang%3D%22en-US%22%3ERe%3A%20Permissions%20Required%20To%20See%20Mobile%20Device%20Management%20for%20Office%20365%20Page%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-742389%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20are%20running%20into%20the%20same%20issues.%20Looked%20in%20Office%20365%2C%20Azure%2C%20and%20the%20Security%20and%20Compliance%20Center%20without%20a%20clear%20cut%20option%20for%20allowing%20MDM%20management.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-742399%22%20slang%3D%22en-US%22%3ERe%3A%20Permissions%20Required%20To%20See%20Mobile%20Device%20Management%20for%20Office%20365%20Page%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-742399%22%20slang%3D%22en-US%22%3EDo%20they%20have%20an%20InTune%20license%3F%3CBR%20%2F%3E%3CBR%20%2F%3EAlso%2C%20try%20going%20here%3A%20%3CA%20href%3D%22https%3A%2F%2Faad.portal.azure.com%2F%23blade%2FMicrosoft_AAD_IAM%2FActiveDirectoryMenuBlade%2FRolesAndAdministrators%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Faad.portal.azure.com%2F%23blade%2FMicrosoft_AAD_IAM%2FActiveDirectoryMenuBlade%2FRolesAndAdministrators%3C%2FA%3E%20and%20assigning%20them%20to%20the%20InTune%20Administrator%20role%3C%2FLINGO-BODY%3E
Highlighted
Deleted
Not applicable

We have recently setup Office 365 MDM via the Security & Compliance Centre, created a policy and are in the process of pushing the policy out and all was going well unti I tried to assign a couple of admins rights to manage the registered devices.

 

The admins in question have Exchange, SharePoint, Skype and User Managment admin rights but I'm unable to figure out how to gicve them rights for device management. I have tried to assign them device management rights in the permissions in the security and compliance centre and also via the Device Management admin role through PowerShell, but they keep getting permission denied errors everytime they try and open device managment.

 

What are the minimum rights required for device managment?

 

Cheers

Andy

3 Replies
Highlighted
Did you ever get an answer for this question?
Highlighted

We are running into the same issues. Looked in Office 365, Azure, and the Security and Compliance Center without a clear cut option for allowing MDM management.

Highlighted
Do they have an InTune license?

Also, try going here: https://aad.portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/RolesAndAdministrator... and assigning them to the InTune Administrator role