Experiences with Multi Admin Approval

Field report

• Currently only for apps and scripts applicable.
• Needs Intune Administrator even when in the approver group.
• The appropriately protected Intune resources (apps, scripts) cannot be restricted individually but are tenant wide protected for everyone via Multi Admin Approval.
• Requests expire in 
• Following entity actions need a separate approval request.
  • Edit
  • Create
  • Modify
  • Delete
  • Assign
• At the time of writing every request is only valid for one hour and then the status changes to expired.

Steps of approval requests

After doing a described action (create, modify, delete, etc.) on an Intune resource which is protected by an access policy, will create an approval request in the Intune Admin Center. To submit the change you can use the normal Intune Admin Center.

Needs approval

Rejected

Approved

Completed

Expired