What you'll learn

Organizations need to delegate Intune administration without granting excessive permissions or exposing resources across unrelated teams, regions, or business units. In this course, Role-based Access Control and Scope Tags in Intune, you’ll gain the ability to implement a secure, least-privilege administrative model. First, you’ll explore built-in and custom Intune RBAC roles, permissions, role assignments, and scope groups. Next, you’ll discover how to create and apply scope tags to control the visibility of devices, policies, apps, and other Intune objects. Finally, you’ll learn how to review, filter, and export audit logs to investigate administrative actions and support compliance requirements. When you’re finished with this course, you’ll have the skills and knowledge of Intune RBAC, scope tags, and auditing needed to delegate administration securely and manage access at scale.