Enable admin access only for certain 3rd party apps from intune MEM

Question

Hi,
we have users who are azure AD joined and they have admin privileges. we want users to enter admin credentials ( that we setup an admin account from AzureAD) to login to certain apps. In this case is there a way to enable admin access only for certain 3rd party apps (example anydesk, video editor apps etc) from Microsoft endpoint manager or Azure AD ?
any alternative suggestions for this scenario also appreciated. Thanks

Answer 1

@Abdul Azeez Thanks for posting in our Q&A.

Currently, intune can manage the installation of apps. However, it couldn't have the settings to manage whether these apps need an admin to access.

If you are interested in this feature, it is suggested to post in intune feedback portal. This is a place to collect customers' requirements and problems.
https://feedbackportal.microsoft.com/feedback/forum/ef1d6d38-fd1b-ec11-b6e7-0022481f8472

Thanks for your understanding.

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

For privilege escalation management, we've made a brief announcement about a future feature, see https://www.microsoft.com/en-us/microsoft-365/blog/2022/04/05/ease-the-burden-of-managing-and-protecting-endpoints-with-microsoft-advanced-solutions/ (under the Greater automation. Increase security. Reduce frustration. section).

Answer 3

You can look into Endpoint Privilege Management which was released to GA as an Intune Addon this week: https://learn.microsoft.com/en-us/mem/intune/protect/epm-overview

Microsoft Intune Endpoint Privilege Management (EPM) allows your organization’s users to run as standard users (without administrator rights) and complete tasks that require elevated privileges. Tasks that commonly require administrative privileges are application installs (like Microsoft 365 Applications), updating device drivers, and running certain Windows diagnostics.

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".