Scoped permissions for role-based access control are generally available

What changed

Permissions from role assignments with different scope tags are applied independently instead of being merged, giving admins the intended access within each scope. Use the Permissions Assessment Report before enabling scoped permissions to review how access will change.

Why it matters

Device-management changes can affect policy processing, reporting, app delivery or support workflows across managed endpoints.

Known limitations

• Availability, prerequisites and rollout scope remain authoritative in the linked Microsoft documentation.

Now check

• Map the announced change to affected Intune workloads and supported platforms
• Pilot the exact profile, app or device action named by Microsoft
• Review policy, app, enrollment and support reports before rollout