Trying to fully understand how this works. If I get a new laptop and get to the point where it is asking for a region, I can hit Shift +F10 to get the command prompt. I can then start PowerShell and set the execution policy to bypass. I install the Get-WindowsAutoPilotInfo script and run it with -Online -Assign andit installs modules, etc, connects to the tenant and dies on Add-AutopilotImportedDevice. I signed in using an account that has an Intune license and has been designated as a device enrollment manager. It works fine if I use my Global Admin Account. What am I missing? I was under the impression that I could add the device enrollment manager role to an account and run this script. Any help appreciated. I don't want to have to give a Global Admin Account to anyone if I can help it.