New permission required to manage Intune scripts

Avatar
Nerdio Product Support

As of July 31, 2025 the Graph API permission DeviceManagementScripts.Read/ReadWrite.All is required for Intune integration and you need to remove the existing DeviceManagementConfiguration.Read/ReadWrite.All permission. Failure to add the new permission will result in Intune script related tasks failing, including the deployment of UAM applications to Intune devices. This change is being implemented to enhance security and control over Intune management capabilities.

For more details, see Updates to required permissions for Microsoft Graph Beta API deviceManagement.

Note

This permission will be added automatically to 7.1 GA installs and later. Existing installations must be manually updated to reflect this change.

To resolve the issue

  1. Navigate to System > Settings.

  2. Do the following:

    Select System > Settings > Integrations area. Navigate to the Intune section, select the down arrow to expand the section, and then select Configure.

    image2789.png

  3. In the Configure Intune dialog box, select Save.

The permissions are now updated.

Was this article helpful?

0 out of 0 found this helpful
Have more questions? Submit a request

Related articles

Comments (1 comment)

Sort by
0
Avatar
Elizabeth Webb

This is not entirely accurate: once you hit “Save”, you get a pop up that a Global Admin is required to contine.  The article should reflect this, and the additional steps that will ensue. 

Please sign in to leave a comment.