Built-in roles cover some common Intune scenarios. You can use both the built-in and custom roles. RolesĪ role defines the set of permissions granted to users assigned to that role. To create, edit, or assign roles, your account must have one of the following permissions in Azure AD:
Each role has a set of permissions that determine what users with that role can access and change within your organization. By assigning roles to your Intune users, you can limit what they can see and change.
Role-based access control (RBAC) helps you manage who has access to your organization's resources and what they can do with those resources.
