administrate permission needed to upgrade groups

Tech 0 Reputation points
2023-01-17T20:25:32.19+00:00

I have created several groups in azure (intune) but i still have an error by adding them in perfiles. i do i resolve that?

Microsoft Intune Grouping
Microsoft Intune Grouping
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Grouping: The arrangement or formation of people or things in a group or groups.
38 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,381 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Crystal-MSFT 42,466 Reputation points Microsoft Vendor
    2023-01-18T01:31:02.2233333+00:00

    @Tech, Thanks for posting in Q&A. From your description, it seems you have error to add group into assignment when we create profile in Intune. If there's any misunderstanding, feel free to let us know.

    To add group under device configuration profile, we can assign the related permission via the following methods:

    1. Create a Role that include Device configuration permission and Organization Read permission.

    User's image

    1. Add role assignment, set admin group (Admin group users are the administrators assigned to this role), Set Scope group and add the groups you want to add under profile assignment.
    2. After waiting some time, then test again to see if we can add the group under device profile assignment.

    Here is a link with more details for your reference:

    https://learn.microsoft.com/en-us/mem/intune/fundamentals/role-based-access-control

    However, if the issue still persists, please collect the following information to clarify:

    1. What is the error when we add group under the device configuration profile? Please get a screen shot.
    2. Please get screen shot where you add the group.
    3. What permission you have under Intune and AAD?

    Please try the above suggestion and if there's anything unclear, feel free to let us know.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.