Intune Enrollment Question

Matt Dillon 1,211 Reputation points
2022-08-18T17:26:25.3+00:00

Trying to fully understand how this works. If I get a new laptop and get to the point where it is asking for a region, I can hit Shift +F10 to get the command prompt. I can then start PowerShell and set the execution policy to bypass. I install the Get-WindowsAutoPilotInfo script and run it with -Online -Assign andit installs modules, etc, connects to the tenant and dies on Add-AutopilotImportedDevice. I signed in using an account that has an Intune license and has been designated as a device enrollment manager. It works fine if I use my Global Admin Account. What am I missing? I was under the impression that I could add the device enrollment manager role to an account and run this script. Any help appreciated. I don't want to have to give a Global Admin Account to anyone if I can help it.

Windows Autopilot
Windows Autopilot
A collection of Microsoft technologies used to set up and pre-configure new devices and to reset, repurpose, and recover devices.
406 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,307 questions
0 comments No comments
{count} votes

Accepted answer
  1. Dillon Silzer 54,286 Reputation points
    2022-08-18T19:44:28.32+00:00

    Hi @Matt Dillon

    You can try use the following steps to create a Role to import devices:

    1) Open up Tenant Administration

    https://endpoint.microsoft.com/?ref=AdminCenter#view/Microsoft_Intune_DeviceSettings/TenantAdminMenu/\~/tenantStatus

    232632-image.png

    2) Go to Roles

    232567-image.png

    3) Create a new role

    232642-image.png

    4) Follow the permissions to assign in the guide:

    232604-image.png

    232586-image.png

    5) Assign to your scope tags.

    6) Assign your role to specific people/accounts:

    232573-image.png


    If this is helpful please accept answer.

    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Matt Dillon 1,211 Reputation points
    2022-08-19T00:47:09.437+00:00

    Yeah. I made the custome role and it worked awesomely.

    0 comments No comments