Multi Admin Approval (MAA) Remote Wipe
We all have been there, a moment or action that a second pair of eyes or approval could prevent a mistake….
Luckily Microsoft Intune got you covered, with Multi Admin Approval (MAA). While this feature is not new, there are some new features, like MAA support for Remote Wipe. Read the blog below to find out more you to implement this feature.
Create a Access Policy
Multi Admin Approval (MAA) is an option that's longer available in Microsoft Intune, but recently remote Wipe was added to this feature….
How does it work and how can we activate this?
First we have to create a Access Policy for the remote wipe action.
From the Intune Portal head over to:
1. Tenant Administration
2. Multi Admin Approval
To create a policy choose for Access Policies.
Add a group of approvers and provide a business justification for creating the policy.
Approve the policy
Now the second pair of eyes is required 😊. An admin which is part of the group we just created has to approve the newly created policy. With this account head over to the Multi Admin Approval (MAA) node in Intune, this admin will see a request waiting for approval.
Open the request, add the approving notes and approve the request so the policy can be created.
Check the policy
Now the requesting admin can validate if the policy is created from the MAA node in Intune.
Testing the policy
Now that the policy is created we can test this function. Head over to the devices pane in Intune and select the device where you want to perform a remote wipe.
With the policy in place a business justification is needed to perform the wipe action.
A message is displayed in de notification area.
Another admin must approve or reject the action. A request is shown in de MAA node. Based upon the action, approve or reject, the action will take place.
Recap
With Multi Admin Approval (MAA) we can create an extra step in some security actions in Microsoft Intune. MAA was already available in Intune and with these new action for remote wipe, MAA can help in preventing a unwanted mistake like reinstalling a device.