# School Administrator - Extended

Look up the additional App Control for Business and report-viewing permissions recorded for the custom School Administrator - Extended role.

!!!warning Source-derived reference
These notes were recovered from OneNote. Configuration, permissions and operating results have not been freshly verified. Confirm the applicable authority and environment before acting.
!!!

## What does "School Administrator - Extended" do?

Adds Permissions on top of what is already provided by the built-in [School Administrator](https://intune.microsoft.com/#view/Microsoft_Intune_DeviceSettings/RoleDefinitionSettingsBlade/~/properties/roleDescription/School%2520Administrators%2520can%2520manage%2520apps%2520and%2520settings%2520for%2520their%2520groups.%2520They%2520can%2520take%2520remote%2520actions%2520on%2520devices%252C%2520including%2520remotely%2520locking%2520them%252C%2520restarting%2520them%252C%2520and%2520retiring%2520them%2520from%2520management./roleId/2f9f4f7e-2d13-427b-adf2-361a1eef7ae8/roleName/School%2520Administrator/roleType/Built-in%2520Role/roleScopeTags~/%255B%255D/roleCategory/Intune) role.

Link to [School Administrator - Extended](https://intune.microsoft.com/#view/Microsoft_Intune_DeviceSettings/RoleDefinitionSettingsBlade/~/properties/roleDescription//roleId/662a610d-d191-48d5-9201-c96312c8fbed/roleName/School%2520Administrator%2520-%2520Extended/roleType/Custom%2520Role/roleScopeTags~/%255B%25220%2522%255D/roleCategory/Intune) in Intune.

Link to Role Properties: [School Administrator - Extended](https://intune.microsoft.com/#view/Microsoft_Intune_DeviceSettings/RoleDefinitionSettingsBlade/~/properties/roleDescription//roleId/662a610d-d191-48d5-9201-c96312c8fbed/roleName/School%2520Administrator%2520-%2520Extended/roleType/Custom%2520Role/roleScopeTags~/%255B%25220%2522%255D/roleCategory/Intune)

### Link to Assignments in Role:

- [School IT Technicians](https://intune.microsoft.com/#view/Microsoft_Intune_DeviceSettings/RoleAssignmentSettingsBlade/~/properties/roleAssignmentId/a573a549-c001-40d2-8d98-92a3641757b0/roleAssignmentName/School%2520IT%2520Technicians/roleAssignmentDescription//members~/%255B%255D/scopes~/%255B%255D/tags~/%255B%255D/roleName/School%2520Administrator%2520-%2520Extended/roleCategory/Intune) assignment for Role "School Administrator - Extended" "School IT Technicians" contains M365 groups of devices and users where this role applies.

### Feature 1: Management of App Control For Business in Intune

App Control For Business -\> Allow…

- Assign
- Create
- View Reports
- Read
- Delete
- Update

### Feature 2: Allow View and Export/Download of Reports from Intune

Managed devices -\> View Reports

Device compliance policies -\> View Reports Device configurations -\> View Reports App Control for Business -\> View Reports

**REFERENCE:** <https://learn.microsoft.com/en-us/intune/fundamentals/role-based-access-control/create-custom-role>

| **Permission**                 | **Action**   | **Description**                                              |
|--------------------------------|--------------|--------------------------------------------------------------|
| **Managed devices**            | View reports | **Generate, view, or export reports** for managed devices.   |
| **Device compliance policies** | View reports | **View, generate, and export** device compliance reports.    |
| **Device configurations**      | View Reports | **View, generate, and export** device configuration reports. |

## Related guidance

- [Topic overview](Introduction.md)
- [Source review status](../../review/Review-status.md)