Endpoint manager - Custom Role. Helpdesk staff unable to add new Apps

DaveK 1,851 Reputation points
2023-01-10T12:01:20.53+00:00

Hi,

I'm trying to get my helpdesk to start taking over some of the more basic admin tasks for our corporate managed Android devices so I have created some guidelines on adding a new app and provided them to a member of the helpdesk so they can do a quick sanity check to make sure they work / make sense.

On doing a Team call so I could see things from their viewpoint it seems the custom role we have configured doesn't seem to be working. On the apps page the Add+ button is grey and as a test I've had them check what options they have when looking at a device and all options for Wipe, etc are also grey so it looks like we've missed something in the config somewhere. The actual role was setup by someone from a 3rd party who helped setup our device management for Android but it would seem they never tested it so I haven't seen the process of setting up a custom role first hand.

Here are the settings within the custom role and its assignment. The helpdesk user is a member of the helpdesk AD group. All devices are set with the default scope tag.

277867-1.jpg 277896-2.jpg

Can you advise where I'm missing something or what to start looking at?

Cheers Dave

Microsoft Intune Security
Microsoft Intune Security
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
370 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Jordan Millama 1,306 Reputation points
    2023-01-10T16:52:25.633+00:00

    I believe they would require either the Microsoft 365 E3 license or Enterprise Mobility + Security E3 license. I suggest just creating a group and assigning it the built-in Intune Administrator role.

    Please accept as an answer if this was helpful.