Secure Remote Actions Retire Wipe and Delete with MAA Multiple Administrative Approval in Intune

Secure Remote Actions Retire Wipe and Delete with MAA Multiple Administrative Approval in Intune! We can use multiple administrative approvals (MAA) in Intune to improve security and protect remote actions like Retire, Wipe, and Delete. MAA adds an extra layer of protection by requiring approval from a second administrator before any actions occur.

This helps prevent unauthorised changes, ensuring that no single administrator can perform sensitive actions, such as wiping a device or deleting data, without proper oversight. By setting up MAA, we reduce the risk of accidental or malicious actions and enhance the overall security of the environment.

MAA in Intune is a security feature that requires a second administrator to approve sensitive actions before they are executed. This ensures that no single account can perform risky actions on devices without oversight.

This post explains how to secure remote actions like Retire, Wipe, and Delete in Intune using Multiple Administrative Approval (MAA). MAA requires approval from a second administrator for these actions, helping organisations improve security, protect devices and data, and ensure accountability.

Patch My PC

Which Remote Actions Support MAA in Intune?

The remote actions that support MAA include: Retire, Wipe and Delete

What are the Benefits of MAA in Intune?

Let’s discuss the benefits of MAA in Intune. The below list helps you to show more details.
1. Reduces the risk of unauthorised or malicious actions.
2. Ensures multiple administrators approve all sensitive changes.
3. Reduces the chances of accidental changes.

Remote Actions Retire Wipe and Delete with Multiple Administrative Approval

Your tenant must have at least two administrator accounts to perform multiple administrative approvals. One account will perform the change (e.g., Retire, Wipe, Delete), and the second account will approve the change.

Steps
Open the Microsoft Intune admin center.
Navigate to Tenant Administration on the Left of the Intune portal
Under Tenant Administration, go to Multi Admin Administration.
Select Access policies.
Click Create to begin creating a new access policy.
Secure Remote Actions Retire Wipe and Delete with MAA Multiple Administrative Approval in Intune – Table 1
Secure Remote Actions Retire Wipe and Delete with MAA Multiple Administrative Approval in Intune - Fig.1
Secure Remote Actions Retire Wipe and Delete with MAA Multiple Administrative Approval in Intune – Fig.1

Remote Actions Retire Wipe and Delete in Intune

On the Basics page, give your access policy a Name and an optional Description. Then, select the Profile type from the available options. Here, you will find options for remote actions like Retire, Wipe, and Delete. Your policy can include these actions to ensure proper approval before application.

Secure Remote Actions Retire Wipe and Delete with MAA Multiple Administrative Approval in Intune - Fig.2
Secure Remote Actions Retire Wipe and Delete with MAA Multiple Administrative Approval in Intune – Fig.2

Need Further Assistance or Have Technical Questions?

Join the LinkedIn Page and Telegram group to get the latest step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, Join the WhatsApp Community to get the latest news on Microsoft Technologies. We are there on Reddit as well.

Resources

In development – Microsoft Intune | Microsoft Learn

Author

Anoop C Nair has been Microsoft MVP from 2015 onwards for 10 consecutive years! He is a Workplace Solution Architect with more than 22+ years of experience in Workplace technologies. He is also a Blogger, Speaker, and Local User Group Community leader. His primary focus is on Device Management technologies like SCCM and Intune. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security, Career, etc.

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.