Endpoint manager - Custom Role. Helpdesk staff unable to add new Apps

Question

Hi,

I'm trying to get my helpdesk to start taking over some of the more basic admin tasks for our corporate managed Android devices so I have created some guidelines on adding a new app and provided them to a member of the helpdesk so they can do a quick sanity check to make sure they work / make sense.

On doing a Team call so I could see things from their viewpoint it seems the custom role we have configured doesn't seem to be working. On the apps page the Add+ button is grey and as a test I've had them check what options they have when looking at a device and all options for Wipe, etc are also grey so it looks like we've missed something in the config somewhere. The actual role was setup by someone from a 3rd party who helped setup our device management for Android but it would seem they never tested it so I haven't seen the process of setting up a custom role first hand.

Here are the settings within the custom role and its assignment. The helpdesk user is a member of the helpdesk AD group. All devices are set with the default scope tag.

Can you advise where I'm missing something or what to start looking at?

Cheers Dave

Answer 1

I believe they would require either the Microsoft 365 E3 license or Enterprise Mobility + Security E3 license. I suggest just creating a group and assigning it the built-in Intune Administrator role.

---

Please accept as an answer if this was helpful.