Created by Claude - please verify

Multi admin approval - access policies, approver groups and recent requests (beta).

Required Microsoft Graph permissions

DeviceManagementRBAC.Read.All Group.Read.All — application permissions, granted to the app registration with admin consent.

Licence: Microsoft Intune.

Endpoints: GET /beta/deviceManagement/operationApprovalPolicies · GET /beta/deviceManagement/operationApprovalRequests · GET /v1.0/groups/{id} ($batch)

Area coverage is matched on each access policy's type and name; confirm edge cases in the Intune portal.

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Intune Multi Admin Approval Coverage

One compromised Intune administrator can wipe every device, push a script to all of them or change who administers Intune. Multi admin approval makes a second admin approve those actions. This report shows which high-impact areas are protected, who approves, and recent requests.