Role-based access control in Microsoft Intune

Namespace: microsoft.graph

Important: APIs under the /beta version in Microsoft Graph are in preview and are subject to change. Use of these APIs in production applications is not supported.

Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.

Intune's role-based access control determines who can perform actions on Intune objects and make changes for managed applications, users and devices.

The following Graph resources are available to manage role-based access control in Intune:

• Device and app management assigned role details
• Device and app management role assignment
• Device and app management role definition
• Identity
• Identity set
• Operation approval policy
• Operation approval policy platform
• Operation approval policy set
• Operation approval policy type
• Operation approval request
• Operation approval request entity status
• Operation approval request status
• Rbac application multiple
• Resource action
• Resource operation
• Role assignment
• Role assignment scope type
• Role definition
• Role management
• Role permission
• Role scope tag
• Role scope tag auto assignment