Skip to main content
Version: 2.1.1-preview

MT.1103 - Intune RBAC groups should be protected by Restricted Management Administrative Units or Role Assignable groups

Overview​

This test checks whether Intune RBAC groups are protected either via Entra Restricted Management Administrative Unit or Role Assignable group.

Remediation action​

  • Add unprotected Entra security groups to a Restricted Management Administrative Unit

Additional information:

Test Metadata​

FieldValue
Test IDMT.1103
SeverityHigh
SuiteMaester
CategoryIntune
PowerShell testTest-MtIntuneRbacGroupsProtected
TagsIntune, Maester, MT.1103

Source​

  • Pester test: tests/Maester/Intune/Test-MtIntunePlatform.Tests.ps1
  • PowerShell source: powershell/public/maester/intune/Test-MtIntuneRbacGroupsProtected.ps1