Delegated or Segmented Device Management?

[Joe Stocker]

Is there a way for a helpdesk group, say in Europe, to manage Europe devices but not manage devices in other regions?

The new Administrative Units (Preview) looks promising but it doesn't appear to include devices:

https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-administrative-...

[#2 · Accepted solution]

Hi Joe

What you are looking for are scope tags I believe.
You should add a tag to a device group and add the tag to all policies.
https://docs.microsoft.com/en-us/mem/intune/fundamentals/scope-tags

There is no sync between scope tags and AUs