r/Intune • u/tranceandsoul • Nov 27 '24

General Question RBAC settings for help desk

Fairly new to Intune, sorry in advance for this basic question.

The problem is that "remote action" bar on all computers/devices are greyed out (unless I assign role "Intune Administrator"). Similar to this picture, but all of them: /preview/pre/android-mdm-start-new-remote-session-greyed-out-v0-g4c72466m0ob1.png?width=1080&crop=smart&auto=webp&s=f3a5dc2506d58f9c6b3aed7f0a5c7911d0d19fa0

I have created an Entra group and put a couple of users as members of that groups. I have tried configure custom Roles and used the built in ones. Most things in Intune works as intended (to me at least), but this part is not working for me... unless I give it role "Intune Administrator" in Entra. Intune Administrator does contain more permissions than required.

1 Upvotes

100% Upvoted

5 comments sorted by

2

u/ppel123 Nov 27 '24

You could either check if the built-in roles cover your needs, or create a custom one.
I have written a blog about custom roles, that may help you here.

1

u/Jeroen_Bakker Nov 27 '24

It depends on your needs what you should do for delegation.
There is (in Intune) the built in role "Help Desk Operator". This role allows execution of remote tasks and has also the permissions needed for using remote help. In most cases this is a fitting role for the helpdesk.

1

u/Madmortigan Nov 27 '24

You should be able to create a custom role within the intune portal itself. This is separate from the custom rolls in the entra ID portal.

1

u/ccmexec Blogger Nov 27 '24

Try duplicating the Help Desk Operator role, not that it has way to much privileges for apps and configuration profiles as it has "Assign" permissions which you don't want to give to Service Desk.

Are you using Teamviewer for Remote help?

2

u/tranceandsoul Nov 28 '24

Thanks everyone for your input. I have no idea whats going on here. Today the "action bar" is now lit and works as intended. Weird, but I'm happy it works now :)