Add more flexibility to Linked Roles (manual admin approval, retention ...
If an optional "built-in" requirement was added where admins or users could "manually approve" a user for a linked role , this would at least allow other server owners to continue running their server, although without automatic role verification.
You can scope the policy to specific admin roles or groups — giving you flexibility to require approval only for certain teams or roles while allowing senior admins to bypass when appropriate.
How to Enable MAA Multi Admin Approval to Create or Modify ...
Multi- Admin Approval (MAA) in Microsoft Intune is a security enhancement that ensures critical role -based access control (RBAC) changes—like assigning high-level admin roles or modifying scope ...
In this article, let's check how to enable MAA Multi Admin Approval to Create or Modify Intune Roles . Microsoft Intune now supports Multi- Admin Approval for critical role -based access control (RBAC) changes, enhancing security and governance.
Multi Admin Approval for Intune Roles (RBAC)
Once the administrator has approved the request, you, as the creator of the role , still need to complete the multi- admin approval process, and then the newly created Intune role will be available. After completing the Multi- Admin approval process, the role is available in the Intune All roles selection and can be assigned to users.
Let's learn how to configure Multiple Admin Approvals MAA in Intune for Apps and Scripts. Multiple administrative approval capability enables you to use Intune access policies to require that a second admin account be used to approve a change before the change is applied. The Intune Multi Admin approval process is a more secure way to deploy applications and policies. This helps to avoid any ...
Use Multi Admin Approval in Intune
Configure Multi Admin Approval to protect your tenant against the use of compromised administrative accounts in Intune.
Learn how to update your automation scripts and applications to work with Multi Admin Approval enforcement on app-authenticated API calls in Microsoft Intune.
Key Details About Add More Flexibility To Linked Roles Manual Admin Approval Retention
Use access policies to require multi admin approval To help protect against a compromised administrative account, use Microsoft Intune access policies to require that a second administrative account approves a change before the change is applied. This capability is known as Multi Admin Approval .
