Allow Help Desk to view only Bitlocker Key in Intune/Azure?

net1994 21 Reputation points
2022-11-01T18:12:00.247+00:00

We have a 3rd party support agency that handles about 200 of our laptops. They are all Azure AD joined. We want to give them rights to retrieve only bitlocker key information. What is the most restrictive way to setup the new support accounts to do this? They don’t currently have accounts to sign into our tenant. We don’t want to them to be able to assign policies or software or modify any Azure/Intune settings. Later on down the road, we may want to allow them to view device information (in addition to bitlocker keys) for them to see what applications might be installed or collect diagnostic data and so on. But first we are starting with just bitlocker information.

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
666 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,321 questions
Microsoft Entra

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Rahul Jindal [MVP] 9,141 Reputation points MVP
    2022-11-01T23:01:32.1+00:00

    This may help. 3185209

    1 person found this answer helpful.
    0 comments