This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(124.80000000000001, 54%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMM%3C/text%3E%3C/svg%3E)
Hello,
we need a custom role, that restrict a admin, to only manage a specific platform. Such as iOS/iPadOs.
Is that possible?
cu
Other Intune-related topics, including unsupported scenarios and platform-specific behaviors
@Markus Männl Thanks for posting in our Q&A.
For this issue, I have answered a similar issue before. If your requirement is same as it, please refer to the following link:
https://learn.microsoft.com/en-us/answers/questions/203603/microsoft-intune-roles.html
Hope it will help.
Thanks for the link!
I´ve already created such a role, but the member of these role, with a tag that only include ios devices, can see all other platform categories. And the member even can create profiles there. Of course only with the ios tag.
But we want memebers see only the assign platform...
@Markus Männl Thanks for your reply.
For this issue, there is no built-in configuration can be set to display specific platform. If you are interested in this feature, it is suggested to feedback in the intune uservoice. This is a place to collect customers' requirements and problems.
https://microsoftintune.uservoice.com/forums/291681-ideas
Thanks for understanding.
it doesn't do what i want ! grrr*
The role members should be able to administrate all aspects of Apple Devices. They can create profiles, but with the assigned sope tag they see not the existings "Enrollment program tokens"/" Apple VPP Tokens"...
Without the scope tag they see the tokens...
@Markus Männl Given this situation, it will not meet the requirement. Please feedback in intune uservoice.
At the same time, I will try my best to feedback too, but I can't guarantee I'll get a response. Let's hope this new feature is implemented in the future.
Thanks again for your feedback.
I found it!
A new token can be assigned with a scope tag.
If there is an existing "registration program token", it is not possible to change this setting.