It’s a common issue, but still worth mentioning. Being a Full Administrator is NOT the same as having full control of all features in the ConfigMgr console. An example is enabling new Intune Extensions like the one released in late December.
As usual you are prompted when new Extensions are available. In this example I’m logged in as Full Administrator and trying to enable the extension in the Administration workspace.
All looks good, right until the point where I accept the License Terms,
And boom! I do not have the required permissions even though I’m a Full Administrator!
Rule #7 when installing a ConfigMgr site is to create a new ConfigMgr administrator group right after the installation of the site and make sure you clone all the permissions from the installation account. This was easily done in previous versions of ConfigMgr/SMS, in ConfigMgr 2012 it has changed a little. Right click the security group you have added, in Properties select Security Scopes. Click Add and Select “All Security Scope”.
With all security scopes assigned your account will be able to install the latest extensions.
