Question

Your organization uses Windows 365 Enterprise. A group of support staff must be able to restart, reprovision, and troubleshoot users' Cloud PCs, but they must NOT be able to create new provisioning policies or modify Azure network connections. You want to grant this access using the least-privileged approach with minimal administrative effort. What should you do?

Accepted Answer

Create a custom Intune role granting only the Cloud PC remote actions and assign it to the support staff

Answer

Assign the support staff the built-in Windows 365 Administrator role in Microsoft Entra ID

Answer

Assign the support staff the built-in Cloud PC Administrator Intune role

Answer

Assign the support staff the built-in Cloud PC Reader Intune role