Streamline Your Workflow with Multi Admin Approval 🛠️

 

As an IT admin, you can utilize a multi admin approval workflow in Microsoft Intune for PowerShell scripts. This ensures that no PowerShell script gets deployed to devices without the approval of another IT admin.

How to configure:

    1- In Microsoft Intune admin ceneter navigate to | Tenant administration | Multi Admin |                   Approval |Access policies and click Create:

    2- Then you need to give the access policy a name and keep the default profile type as "Approval powershell script" 

    3- These actions could include creating, editing, assigning, and deleting. A policy will limit         actions on a script, such as PowerShell scripts or remediation.

    

    4- You need to select a group. 

    

    5- When creating a new PowerShell script, the workflow does not include the Assign step.         However, you will be required to provide a notification.

OBS!! "As you can see, I cannot approve my own request for multi admin approval to create this policy. Someone with an admin role must approve it.

The same process applies when an admin tries to create a PowerShell script or remediation. If you create it, someone else with an admin role must approve it.

    6- I will log in with another admin account to show you and approve the request

The purpose of a multi-admin approval policy is to enhance security and reduce the risk of errors and unauthorized changes in IT systems. By requiring at least two administrators to review and approve an action, such as creating or deploying PowerShell scripts, it ensures that multiple sets of eyes have examined the action before it's executed. This helps to:

       *Prevent mistakes: Requiring approval from multiple administrators reduces the risk of            errors or incorrect changes.

       * Increase security: Having multiple approvals decreases the likelihood of a single                     administrator abusing their privileges.

      * Enhance traceability: All approvals are recorded, providing a clear audit trail and                     increasing accountability among administrators.

It's an important part of maintaining the highest possible security standards in IT administration.

Here is an example of an admin who created a script.

Now another admin need to sign in with admin account to review and approve the script.