Scope tags
Bereichstags
Scope tags, together with RBAC, determine which Intune objects an administrator can see and manage. Example: a "Seattle" tag on policies and devices ensures the Seattle IT team only sees its own objects. Roles define what an admin can do; scope tags define what they can see.
Path in the Intune admin center
📍 Mandantenverwaltung › Rollen › Bereiche (Tags)Hands-on tasks
- Review RBAC least privilegeMicrosoft Intune - Hands-on Course · Module 04
- Lock down access to the LAPS password (least privilege)Microsoft Intune - Hands-on Course · Windows LAPS - manage the local admin password
- Cloud PKI in practice - create an issuing CA and wire up SCEPMicrosoft Intune - Hands-on Course · Cloud PKI
- Audit Remote Help sessionsMicrosoft Intune - Hands-on Course · Remote Help (Concept)
- Create a scope tag and control visibilityMicrosoft Intune - Hands-on Course · Scope tags - distributed IT administration
- Delegated site IT with role, scope groups, and scope tagsMicrosoft Intune - Hands-on Course · Scope tags - distributed IT administration
- Test scope tag visibility with a test adminMicrosoft Intune - Hands-on Course · Scope tags - distributed IT administration
- Design governance rules for Intune changesMicrosoft Intune - Hands-on Course · Governance, audit, and Multi Admin Approval
- Plan a quarterly review for roles and critical policiesMicrosoft Intune - Hands-on Course · Governance, audit, and Multi Admin Approval
- Find your own change again in the audit logMicrosoft Intune - Hands-on Course · Governance, audit, and Multi Admin Approval
- Analyze and clean up policy conflictsMicrosoft Intune - Hands-on Course · Resolve policy conflicts systematically
- Clean up assignments and legacy profilesMicrosoft Intune - Hands-on Course · Resolve policy conflicts systematically
- Perform a recurring Intune tenant health reviewMicrosoft Intune - Hands-on Course · Tenant health review
- Ops round 5: hand over open findings, dismantle the lab objectsMicrosoft Intune - Hands-on Course · Module 24
- Choose and justify a group, filter, or scope tagMicrosoft Intune - Hands-on Course · Module 26
Jump straight to the matching course task (sign-in required).
On Microsoft Learn
Related terms