What role is needed to configure App Protection Policies in Intune?

Copper Contributor

Hi, I need to configure policy in app protection. what is the least privilege role needed?





3 Replies
I think that you need at least the Policy and Profile Manager role.

People with this role can manage compliance policy, configuration profiles, Apple enrollment, corporate device identifiers, and security baselines.

Thanks for your response @Jeroen Burgerhout,

Unfortunately, I can't find "Policy and Profile Manager Role" in Admin Center.



check the roles in the Intune portal and not in the M365 Admin portal.
Tenant Administration -> Roles.


But I'm not sure if that will be the correct role.

Otherwise you have to create a custom role.


Microsoft Intune built-in roles reference | Microsoft Learn