How to Set Multi Admin Approval for three new device actions on the HTMD Intune blog

In this article, let’s explore how to manage Multi Admin Approval For three new device actions on Microsoft Intune. Intune’s Multi Admin Approval (MAA) The ability has now been expanded to include three actions related to strong devices: Device delete, retirement devices, and device devices. This action has a direct impact device life cycle And Data securitySo adding workflow of approval helps the organization implement stronger governance.

Instead of a single admin that can trigger this action, Intune now requires a request through the approval chain specified in your access policy. This ensures that sensitive tasks are monitored, reduce the possibility of errors, and increase accountability. With this update, when the Intune administrator sends a request to delete, pensionor delete Device, action will not be executed immediately.

Conversely, he entered A Delayed approval countryseen by the approval specified in you MAA access policy. Only after other official admin reviews and approved the request, the action will be continued. This workflow provides extra protection for scenarios such as pension devices on a scale, wiping lost/stolen devices, or permanently deleting notes from Intune. This update is generally available (GA) from Intune 2508 service release etc.

For the company tightly compliance or Audit Requirements, this increase brings more control And Visibility. Organizations can now prevent accidental or dangerous device actions that can affect business sustainability or security compromise. Combined with audits and reporting, MAA ensures there are always clear traces who asks And who agrees Critical device operation. This makes Intune not only a device management solution but also a platform that is ready for governance for Modern IT Operations.

Details about the Multi Admin Approval for three new device actions in Intune

The following is a clear comparison table for three new intune device actions that are supported Multi Admin Approval (MAA).

Create an access policy to prepare a multi -admin approval to delete the device

To configure multi-amin approval Delete deviceentered into Microsoft Intune Admin Center use your credential administrator. You can follow similar steps for actions such as retirement of devices and device removal.

• Navigate to TERSTEND ADMINISTRATION > Multi Admin Approval > Access policy
• Click +Make

In Basics detailed the panel, name the access policy as Delete devices – Access policy Also useful to provide a brief description of the policy objectives. Select the option below and click Next.

• Information – Optional
• Policy type – Choose Delete device from drop-down
• Platform – Only Windows & Non-windows only

Notes: Remote device action policy will limit actions to certain actions such as delete, pension or delete for a single device or bulk device at Admin portal or Graphic API.

To set the user group to be approved, first for the group and then add approval as a member. Click +Add the group and select MAA – Adjustment Group. Members of this group will have the authority to approve requests that require more than one admin’s agreement.

In Review + send for approval panel, review all the arrangements carefully for Delete devices – Access policy policy. Be sure to include valid business justification. I came in “Delete New Devices – Access Policy“Here. After you confirm everything, select Send to be approved.

Review the approval sent

Another admin who is part of us MAA – Adjustment Group now can review and agree with you request sent. Please enter using another admin account that is our member MAA – Adjustment Group. Navigate to TERSTEND ADMINISTRATION > Multi Admin Approval > All requests to find a request.

Click on Delete devices – Access policy – Make Hyperlink. This will take you to the part where you can review the changes below and take the appropriate action. In the approval note section, add a note that I was added as ApprovedThen click on Approve request knob.

After another admin approves your request, you can complete it by navigating to TERSTEND ADMINISTRATION > Multi Admin Approval > My requestThen click Delete devices – Access policy – Make.

The new one Delete devices – Access policy has been successfully made. We can find this below TERSTEND ADMINISTRATION > Multi Admin Approval > Access policy Tab.

Intune admin experience

It’s time to review functionality this policy. From now on, whenever you delete The registered device is intune from Center for Admin IntuneYou will be asked to send a multi -admin approval. The deleted action will remain in a delayed status until the other admin approves or deny the request.

In this example, I try to delete a device named Desktop-rks9ol8. However, the action is still displayed as “Delete delayed“Because of the MAA access policy. Therefore, we can conclude that our policies function as expected.

Need further assistance or have technical questions?

Join LinkedIn page And Telegram Group To get step -by -step guidelines and the latest news updates. Join us Meeting page to participate in the user group meeting. Also, join WhatsApp community To get the latest news about Microsoft Technologies. We were there Reddit as well.

Author

Vaishnav K. Has 12 years of experience in SCCM, intune, modern device management, and automation solutions. He wrote and shared knowledge about Microsoft Intune, Windows 365, Azure, Entra, Powershell Scripting, and Automatic. View his profile on LinkedIn.