This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(169.60000000000002, 50%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EFC%3C/text%3E%3C/svg%3E)
I have created a custom role within Intune and granted the permission of managed apps - read, however, the users that are assigned this role are not able to view anything under Devices\Windows\Device Name\Managed Apps. Is there a specific permission that I can assign to give them the ability to view this?
Setting up and managing device configurations using Intune
Other Intune-related topics, including unsupported scenarios and platform-specific behaviors
Answer accepted by question author
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 90%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENM%3C/text%3E%3C/svg%3E)
@Fluno, Corey H We actually just figured this out; you have to give read rights to Organization. Makes zero sense based on the descirption but it works.
No, we never found an answer, but to be honest we stopped looking a few months ago.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(25.6, 63%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYS%3C/text%3E%3C/svg%3E)
@Fluno, Corey H & @Lu Dai-MSFT Hello, we have the same issue, did you guys find out which permission is needed? Best regards, Yme
No, we have never found a solution, but to be honest, we have not looked now for several months.
Thanks for the answer on the managed apps permissions. I have read permissions to the devices, but still my support staff can't see managed apps under devices. Here are the permissions I have set:
@Fluno, Corey H If possible, please show the full screen shots of this role's Properties, Assignments and the target Scope tags.
@Fluno, Corey H I have done the test in my lab. It is same as yours that I can't access to Devices\Windows\Device Name\Managed Apps.
I have checked custom role permissions and I didn't find any more appropriate permission.
Given this situation, it is suggested to create an online support ticket to confirm if it is an issue or if there is another permission can make it. Here is the support link:
https://learn.microsoft.com/en-us/mem/get-support
Thanks for your understanding.
@Fluno, Corey H Thanks for posting in our Q&A.
For this issue, "permisson of managed apps-read" means that you can only view things under Apps page in intune portal. However, "Devices\Windows\Device Name\Managed Apps" is under Devices page, so it is suggested to try to set the permission of managed devices to "read". And then check if you can successfully to view Devices\Windows\Device Name\Managed Apps.
Hope it will help.
If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.