Insufficient privileges to change device owner

%3CLINGO-SUB%20id%3D%22lingo-sub-2256935%22%20slang%3D%22en-US%22%3EInsufficient%20privileges%20to%20change%20device%20owner%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2256935%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20assigned%20some%20users%20the%20Cloud%20Device%20Administrator%20role%2C%20which%20says%20%22%3CSPAN%3EFull%20access%20to%20manage%20devices%20in%20Azure%20AD.%22%20But%20when%20they%20try%20to%20update%20a%20device%20owner%20in%20AzureAD%20Powershell%20using%20the%3C%2FSPAN%3E%3C%2FP%3E%3CDIV%3EAdd-AzureADDeviceRegisteredOwner%20or%26nbsp%3B%3CSPAN%3ERemove-AzureADDeviceRegisteredOwner%20cmdlets%3C%2FSPAN%3E%2C%20they%20get%20this%20error%3A%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3ECode%3A%20Authorization_RequestDenied%3CBR%20%2F%3EMessage%3A%20Insufficient%20privileges%20to%20complete%20the%20operation.%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3EAs%20a%20global%20administrator%2C%20I%20can%20change%20device%20owners%20using%20these%20cmdlets%2C%20but%20clearly%20I%20don't%20want%20to%20give%20them%20that%20role.%20Is%20there%20another%20role%20or%20permission%20I%20can%20assign%20that%20will%20allow%20changing%20device%20owners%3F%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2256935%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAzureAD%20PowerShell%20Module%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Occasional Contributor

I have assigned some users the Cloud Device Administrator role, which says "Full access to manage devices in Azure AD." But when they try to update a device owner in AzureAD Powershell using the

Add-AzureADDeviceRegisteredOwner or Remove-AzureADDeviceRegisteredOwner cmdlets, they get this error:
 
Code: Authorization_RequestDenied
Message: Insufficient privileges to complete the operation.
 
As a global administrator, I can change device owners using these cmdlets, but clearly I don't want to give them that role. Is there another role or permission I can assign that will allow changing device owners?
0 Replies