School Administrator - Extended

IT Managers

Look up the additional App Control for Business and report-viewing permissions recorded for the custom School Administrator - Extended role.

Source-derived reference

These notes were recovered from OneNote. Configuration, permissions and operating results have not been freshly verified. Confirm the applicable authority and environment before acting.

What does "School Administrator - Extended" do?

Adds Permissions on top of what is already provided by the built-in School Administrator role.

Link to School Administrator - Extended in Intune.

Link to Role Properties: School Administrator - Extended

Link to Assignments in Role:

School IT Technicians assignment for Role "School Administrator - Extended" "School IT Technicians" contains M365 groups of devices and users where this role applies.

Feature 1: Management of App Control For Business in Intune

App Control For Business -> Allow…

Assign
Create
View Reports
Read
Delete
Update

Feature 2: Allow View and Export/Download of Reports from Intune

Managed devices -> View Reports

Device compliance policies -> View Reports Device configurations -> View Reports App Control for Business -> View Reports

REFERENCE: https://learn.microsoft.com/en-us/intune/fundamentals/role-based-access-control/create-custom-role

Permission	Action	Description
Managed devices	View reports	Generate, view, or export reports for managed devices.
Device compliance policies	View reports	View, generate, and export device compliance reports.
Device configurations	View Reports	View, generate, and export device configuration reports.