You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: memdocs/intune/enrollment/device-enrollment-manager-enroll.md
+14-12Lines changed: 14 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,7 +8,7 @@ keywords:
8
8
author: Lenewsad
9
9
ms.author: lanewsad
10
10
manager: dougeby
11
-
ms.date: 07/02/2021
11
+
ms.date: 05/10/2022
12
12
ms.topic: how-to
13
13
ms.service: microsoft-intune
14
14
ms.subservice: enrollment
@@ -33,40 +33,42 @@ ms.collection:
33
33
34
34
# Add device enrollment managers
35
35
36
-
A device enrollment manager is a non-administrator user who can enroll devices in Intune. DEMS are useful to have when you need to enroll and prepare devices before handing them out to . DEM users can enroll up to 1,000 devices, while a standard non-admin account in Intune can only enroll 15.
36
+
A device enrollment manager (DEM) is a non-administrator user who can enroll devices in Intune. Device enrollment managers are useful to have when you need to enroll and prepare a lot of devices for distribution. People signed in to a DEM account can enroll and manage up to 1,000 devices, while a standard non-admin account can only enroll 15.
37
37
38
-
A DEM account requires an Intune user or device license. To enable the feature for someone in you organization, you must assign the Intune device enrollment manager permissions to their Azure AD account. This article provides an overview of device enrollment manager accounts, limitations, and how to manage permissions.
38
+
A DEM account requires an Intune user or device license, and an associated Azure AD user. Global Administrators and Intune Service Administrators can add and manage device enrollment managers in the Microsoft Endpoint Manager admin center.
39
+
40
+
This article describes the limits and specifications of enrollment manager and how to manage permissions.
39
41
40
42
## Supported enrollment methods
41
43
42
44
A device enrollment manager can use the following methods to enroll devices in Intune:
> To compare DEM best practices and capabilities alongside other Windows enrollment methods, see [Intune enrollment method capabilities for Windows devices](./enrollment-method-capab.md).
51
53
52
54
53
55
## Account permissions
54
56
55
-
Users assigned the Global Administrator or Intune Service Administrator role in Azure AD can:
57
+
These Azure AD roles can manage device enrollment managers:
56
58
57
-
- Assign DEM permissions
58
-
- See all DEM users in the admin center
59
+
* Global Administrator
60
+
* Intune Service Administrator role in Azure AD
59
61
60
-
DEMs assigned read-only permissions in Azure AD can only see the DEM users they've created.
62
+
They can add and delete device enrollmnet managers, and view all DEM users in the Microsoft Endpoint Manager admin center. You can assign the DEM read-only permission to users who don't meet the role requirements. It lets them see the DEM users they've created.
61
63
62
64
## Limitations
63
65
64
-
This section describes the limitations that comes with enrolling devices from your DEM account.
66
+
The device enrollment manager account can't be used with all features in Microsoft Intune and has some limitations when used with others. This section describes the limitations you could encounter while sigmed in to a DEM account.
65
67
66
68
### Android Enterprise
67
-
You can enroll up to 10 personally-owned devices with work profiles.
69
+
You can enroll up to 10 personallyowned devices with work profiles.
68
70
69
-
The following types of devices can't be set up with a DEM account:
71
+
The following types of Android Enterprise devices can't be set up via DEM:
0 commit comments