Monday, 2 February 2026

Custom RBAC guidance adds Admin tasks permissions and Android kiosk support is clarified

The day updates custom-role documentation and Managed Home Screen OEMConfig guidance. The material makes the permissions behind centralized administrative tasks more visible and extends two Managed Home Screen permissions to an additional supported Android management scenario.

• Intune · Fundamentals

  Custom roles can be scoped to centralized Admin tasks

  The custom-role permission reference adds Admin tasks Create, Delete, Read, and Update operations, enabling least-privilege delegation for device-management administrative task creation, status updates, and review.

• Intune · Android

  Managed Home Screen OEMConfig permissions broaden documented support

  The Android guidance now marks Alarms & Reminders and Write Settings permissions as supported for another Managed Home Screen device mode. These permissions underpin screensaver, automatic sign-out and relaunch, brightness, and rotation controls.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.