Intune Helpdesk user cant access intune

Question

Intune Helpdesk user cant access intune

lalajee 1,821

Hi, I have assign an helpdesk access to ad AD group but none of the users in the group can access Endpoint.microsoft.com I have taken following steps

Create group in AD 'Intune Admin'
Assign this group to 'Help Desk Operator' in intune portal (https://learn.microsoft.com/en-us/mem/intune/fundamentals/assign-role)

But still when user try to access device page or anything they get access denied or no device found error Can someone pleae let know what did I do wrong here

1 answer

Your answer

Answer 1

Crystal-MSFT 53,991 Microsoft External Staff

@lalajee, Thanks or posting in Q&A. From your description, it seems the user with Help Desk Operator role assigned can't access Devices page. If there's any misunderstanding. feel free to let us know.

Based on my research, this role has the permission to get the devices information. To check on the issue, please collect the following information to clarify:

Please login with one user with Help Desk Operator role, go to Tenant administration->Roles->My permission to see if all the permission are gotten. Please get a screen shot of its permission.
For the devices, are they assigned to some scope tags or they are using the Default scope tag? For the role assignment, did we assign any scope tag?
For the affected users, did they have any Intune license assigned?

Please check the above information and if there's any update, feel free to let us know.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

lalajee 1,821 Reputation points

2023-04-25T07:54:32.5966667+00:00
@Crystal-MSFT

Please login with one user with Help Desk Operator role, go to Tenant administration->Roles->My permission to see if all the permission are gotten. Please get a screen shot of its permission. It say no permission assign to this user

For the devices, are they assigned to some scope tags or they are using the Default scope tag? For the role assignment, did we assign any scope tag? No scope tags, I have just assign the default one

For the affected users, did they have any Intune license assigned? No intune license assign to these users as they only need to admin it
lalajee 1,821 Reputation points

2023-04-25T07:59:36.14+00:00

Intune_HelpDesk_Operator group is on our on-prem AD. We are hybrid join All of the users are added into this group in our on-prem AD
Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2023-04-25T08:55:51.74+00:00

@lalajee, Thanks for the reply. From your description, it seems there's no permission under My permission of the user. It seems the permission is not applied. I notice the user is unlicensed. Here, please get a screen shot of the setting "Administrator Licensing" under Roles to confirm if the unlicensed admin can access Intune.
lalajee 1,821 Reputation points

2023-04-25T13:14:46.2366667+00:00

@Crystal-MSFT Please see.
Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2023-04-26T02:21:30.53+00:00

@lalajee, Thanks for the reply. From the information you provided, I know the unlicensed admin can access Intune in your environment. It can be that the permission needs some time to apply. You can wait 48 hours to see if the permission will come. If not, I suggest open case to check in the background to get more help. Here is a link with the steps to open case:
https://learn.microsoft.com/en-us/mem/get-support

Share via

Intune Helpdesk user cant access intune

1 answer

Your answer