You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: memdocs/intune/enrollment/device-enrollment-manager-enroll.md
+9-3Lines changed: 9 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,7 +8,7 @@ keywords:
8
8
author: ErikjeMS
9
9
ms.author: erikje
10
10
manager: dougeby
11
-
ms.date: 02/22/2018
11
+
ms.date: 04/28/2020
12
12
ms.topic: conceptual
13
13
ms.service: microsoft-intune
14
14
ms.subservice: enrollment
@@ -47,6 +47,13 @@ DEM user accounts and devices that are enrolled with a DEM user account have the
47
47
- Every device enrolled with DEM accounts needs to be properly licensed to be managed by Intune. The license could be an Intune user license or an Intune device license.
48
48
- If you're [enrolling Android Enterprise work profile devices](android-work-profile-enroll.md) by using a DEM account, there is a limit of 10 devices that can be enrolled per account.
49
49
-[Enrolling Android Enterprise fully managed devices](android-fully-managed-enroll.md) with DEM accounts isn't supported.
50
+
- Applying an Azure AD device restriction to a DEM account will prevent you from reaching the 1,000 device limit that the DEM account can enroll.
@@ -56,15 +63,14 @@ DEM user accounts and devices that are enrolled with a DEM user account have the
56
63
57
64
3. On the **Add User** blade, enter a user principal name for the DEM user, and select **Add**. The DEM user is added to the list of DEM users.
58
65
59
-
## Permissions for DEM
66
+
## Permissions required to create DEM accounts
60
67
61
68
Global Administrator or Intune Service Administrator Azure AD roles are required to
62
69
- assign DEM permission to an Azure AD user account
63
70
- see all DEM users
64
71
65
72
If a user doesn't have the Global Administrator or Intune Service Administrator role assigned to them, but has read permissions enabled for the Device Enrollment Managers role assigned to them, they can see only the DEM users they've created.
66
73
67
-
68
74
## Remove device enrollment manager permissions
69
75
70
76
Removing a device enrollment manager doesn't affect enrolled devices.
0 commit comments