Seperate Intune administrators for smartphones and laptops devices?

[Kem_Mal]

I have 1 O365/Azure tenant. We have implemented intune for the Windows laptops by MicrosoftPartnerA. Now we would like to implement intune for smartphones by MicrosoftPartnerB (specialised in mobile devices). How can I seperate the administrators permissions of these 2 companies? They don't like it to have access in each other settings. RBAC? Another Azure tenant wit a sync with AAD? Please help.

[#2]

You can use RBAC and Scope Tags, don't know if that would fit your needs? https://docs.microsoft.com/en-us/mem/intune/fundamentals/scope-tags / https://blog.thinformatics.com/2020/03/role-based-access-control-in-microsoft-endpoint-manager/

[#3]

@Harm_Veenstra  thank you. Where can I find all RBAC roles?

[#4]

You can assign a built-in or custom role to an Intune user.

To create, edit, or assign roles, your account must have one of the following permissions in Azure AD:

Global Administrator
Intune Service Administrator

In the Microsoft Endpoint Manager admin center, choose Tenant administration > Roles > All roles.

[#5]

https://techcommunity.microsoft.com/t5/microsoft-intune/how-to-seperate-administrators-in-intune-for... same question posted here?

[#6]

Thank you @Harm_Veenstra , Isn't there any official documentation with all the roles and description?

[#7]

I answered your question regarding seperating certain things in Intune using a custom role and scope tags, an overview of Intune Admin roles is here https://docs.microsoft.com/en-us/microsoft-365/admin/add-users/intune-admin-roles-in-the-mac?view=o3...