Intune Enrollment Question

Matt Dillon 1,211 Reputation points

Trying to fully understand how this works. If I get a new laptop and get to the point where it is asking for a region, I can hit Shift +F10 to get the command prompt. I can then start PowerShell and set the execution policy to bypass. I install the Get-WindowsAutoPilotInfo script and run it with -Online -Assign andit installs modules, etc, connects to the tenant and dies on Add-AutopilotImportedDevice. I signed in using an account that has an Intune license and has been designated as a device enrollment manager. It works fine if I use my Global Admin Account. What am I missing? I was under the impression that I could add the device enrollment manager role to an account and run this script. Any help appreciated. I don't want to have to give a Global Admin Account to anyone if I can help it.

Windows Autopilot
Windows Autopilot
A collection of Microsoft technologies used to set up and pre-configure new devices and to reset, repurpose, and recover devices.
406 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,307 questions
0 comments No comments
{count} votes

Accepted answer
  1. Dillon Silzer 54,286 Reputation points

    Hi @Matt Dillon

    You can try use the following steps to create a Role to import devices:

    1) Open up Tenant Administration\~/tenantStatus


    2) Go to Roles


    3) Create a new role


    4) Follow the permissions to assign in the guide:



    5) Assign to your scope tags.

    6) Assign your role to specific people/accounts:


    If this is helpful please accept answer.

    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Matt Dillon 1,211 Reputation points

    Yeah. I made the custome role and it worked awesomely.

    0 comments No comments